Comment on Change My Mind: The Fediverse is not as connected as were told, and it's splintering even more.
TORFdot0@lemmy.world 8 months agoIn my opinion a centralized authentication platform such as that requires a single point of failure or a level of trust between instances that isn’t and in my opinion shouldn’t be allowed as it would increase the attack surface for bad actors to exploit.
I think the best way would be for the community to create a docker image or other out of box solution that makes it easy for instance hosts to support multiple services on different subdomains from a single endpoint with shared authentication and as such your lemmy.example.com credentials would work for mastodon.example.com and would work for pixelfed.example.com and would work for peertube.example.com and so on and so forth.
Jilanico@lemmy.world 8 months ago
It wouldn’t be centralized. There would be multiple instances and you’d choose which one to use to host your account.
I like your idea, though. It doesn’t solve the problem of moving your account from one Lemmy instance to another, for example, but it does reduce barriers to entry for other fediverse platforms.
TORFdot0@lemmy.world 8 months ago
If it’s not centralized then that’s where the trust issues come in. How can I trust another node on the network that I should authenticate User X when I don’t have the secret key?
Jilanico@lemmy.world 8 months ago
I don’t really know the details of how “log in with your Google/Facebook account” works on other sites, but I imagine it’d work the same way. I’m no expert on this stuff tho.