On Wed, 2026-01-21 at 00:30 +0000, Andy Smith wrote: > [...] You could choose to expand this notion beyond the individual site, so > instead of it being forums.debian.net working out its own authentication > scheme there were some central service managing the identities of the > users. [...] Decentralized identity providers exist that can be self-hosted, > like > OAuth.
FYI salsa.debian.org already serves this purpose. It doubles as Debian's GitLab instance as well as an oAuth2 provider for many Debian sites such as nm.debian.org. > These are highly obscure and probably a dead end: anything that > can be self-hosted can be abused to create infinite identities. Salsa registrations require manual approval from the admins to protect against spam / bot accounts. -- Maytham
signature.asc
Description: This is a digitally signed message part
