[IKI-aktivistit] OpenID interest?

[Hannu Aronsson]

Hei,

We have had discussions on OpenID (or something similar) some time ago in the board, but didn't do anything as it did not seem that useful at the time, due to
- not very widely used
  - email+password seems to have taken over even some places which used OpenID
  - many places don't allow any provider
- a bit unclear which of the standards we should use
- the standards seem to be changing, and this should be supported "forever" to avoid losing login access to sites
- no volunteer to set it up at the time
- we could probably repurpose one of the old servers for this service

Technically we planned to do this in the following way:
- users could set a separate iki-id password in the web membership pages, we would store a hashed separate password
- the xxxID system would use iki-address and the iki-id password for authentication. 
  - We could replicate the username+hashed password to the xxxID server (for independence from the rest of iki) or 
  - the xxxID server could check the member database each time in some suitable way (LDAP/http/something).
- you could then use the iki-id URL, username and password to authenticate to sites

Practical proposal: Let's organise the next "iki hack evening" on this topic at a time so we can all get together and figure it out?

(Voi kommentoida suomeksikin jos haluaa)

Yours,
  Hannu

> On 28.12.2016, at 21:32+0200, Pekka Nikander <pekka.nikander at iki.fi> wrote:
> 
> I'm getting tired of google and facebook dominating the ID management market.
> 
> Hereby I am volunteering to setup Iki OpenID server, preferably also with smart card based backend authentication.  But I most probably need some help to figure out what software to install.  And I currently don't have any access to any of the iki servers.
> 
> So, Kivinen or anyone, any suggestion where to start?  Opinions?
> 
> --Pekka
> 
> 
> 
> _______________________________________________
> IKI-aktivistit mailing list
> IKI-aktivistit at listat.iki.fi
> https://listat.iki.fi/mailman/listinfo.cgi/iki-aktivistit


--
haa at iki.fi http://www.haa.iki.fi



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listat.iki.fi/pipermail/iki-aktivistit/attachments/20170101/7c1539f9/attachment-0001.html>