[–] 1 point 3 weeks ago

Correct. I have a dual boot with windows and when I rebooted to Linux I got stuck installing updates. I'm not particularly opposed to the idea of automatic updates, but I am vehemently against blocking entire computer use while it occurs w/o a way to cancel. I was also mad that to my knowledge this was the default and not an option in feature.

  • source
  • parent
  • context
  • [–] 18 points 4 months ago (3 children)

    I feel conflicted. OAuth gets a lot correct in so far as most sites don't have to deal with a lot of difficult auth bits, but also I don't like having to rely on big (usually social media) companies to be the auth source.

    I think about dnssec a lot.

    It feels to me like there should be some form of public key infrastructure where there is a global root key (or short list of) then providers that can issue certificates out to other smaller organizations or individuals who could then use that source of trust to prove who they are. Imagine OAuth but you could just fill in your provider of choice (self hosted?) and if the certs checked out everything would verify correctly.

    That being said who does the bits around ensuring that you are who you say you are. I suppose a government body running such a system could work though I sweat at the idea of going to the dmv to reset a forgotten password or report a stolen identity.

    Idk maybe if I think about this enough I can come up with a cryptography secure system...

  • source
  • view more: next ›