mastodon.ar.al is one of the many independent Mastodon servers you can use to participate in the fediverse.
This is my personal fediverse server.

Administered by:

Server stats:

1
active users

Aral Balkan

It’s very interesting reading this and related threads on Web Authentication (“passkeys”).

The ability for people to use their created/associated key material to sign and encrypt their communication would be a huge boon for decentralised web applications. And yet, of course, the related W3C groups reject the use case. Because allowing people (instead of the corporations the W3C represents) to control their own identities is anathema to Big Tech.

github.com/w3c/webauthn/issues

GitHubCan the private keys be used for other cryptographic operations? · Issue #1595 · w3c/webauthnFor example, can they be used to sign and encrypt data the client passes? This goes beyond authentication, so it may be fair to consider it out of scope, given that "authn" is in the spec...

Your daily reminder that the W3C is the standards body of people farming.

@aral To change that, we need to change how profits are generated in the internet.

⇒ ads must end.

@ArneBab @aral 👆this! I believe something like the Web Monetization has potential

@aral I have the same gripe with New Zealand's "RealMe" realme.govt.nz/ - "The easiest and most secure way to prove your identity online" . Having jumped through the ID hoops it can even be used to renew a passport, yet they don't provide digital certificates/keys to allow people to sign/encrypt things. I asked, and also got the answer that those things are "out of scope" - a missed opportunity!

www.realme.govt.nzHomeRealMe is an initiative from the New Zealand government and New Zealand Post to make doing things online easier and more secure.