Hacker News Reader

Comment by darklajid | Hacker News Reader

The problem I have with that is that I haven't found decent identity providers last time I checked.

Without some decent/proven implementations I'm hesitant to use it. I don't quite like using Mozilla's service (mostly not because of trust, it just feels half-assed not to go the extra mile and is considered an intermediate workaround/solution even by Mozilla, as far as I know). Without decent options to self host I guess I could implement it myself - but that's a big step.

So .. although I'm a fan of the concept, I'm still not using Persona anywhere.

View on HN

Have a look at mine:

https://bitbucket.org/djc/persona-totp

It's less than 150 LOC of Python code (plus some HTML templates and a few basic tests).

Will do, thanks a lot. Since my infrastructure box is mostly python based (radicale, for example) this might fit in nicely.

Since everyone is plugging their own: here's a identity provider daemon written in Go:

https://github.com/wulczer/persona-idp

It uses my Mail Transfer Agent to identify, so I can just use me email password to log in to Persona-enabled sites, but you can easily swap it out for a different credentials checker.

That's quite cool - actually that'd be exactly what I want to host myself.

Not a fan of go (cough The stripe CTF made it again clear that go get isn't exactly what I want, ever), and don't want to build stuff on my box, but I'll certainly check it out. Thanks for chiming in!

Maybe you'll like the one I made: https://www.persowna.net/

I saw your link somewhere else in this thread.

I do like the site and I think it's a clever thing to build a service around it. But .. all of your options (well, all affordable ones, all that I even looked at for myself plus family) are hosted, right? I could use my own domain, but you'd be the endpoint?

Don't take that the wrong way, but you're not more trustworthy than the Mozilla Foundation.. :)

Please correct me if I missed something, but it seems as if you interpreted my self-hosted as 'can use your own domain name', no?

Yes, exactly. There are currently other options if you want to be completely self-hosted (and are not a large enterprise that has multiple users and wants a behind-the-firewall option). Persowna is a more featureful/(hopefully) secure option than the default bridge.

Reply on news.ycombinator.com