X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/c5ba451bb561f185577b82f736671ea9fbd56b69..e71622d233660b5ba305d68e586d7d14ff2124e6:/doc/todo/BrowserID.mdwn?ds=sidebyside

diff --git a/doc/todo/BrowserID.mdwn b/doc/todo/BrowserID.mdwn
index 9340dc0f1..1bcfaef7b 100644
--- a/doc/todo/BrowserID.mdwn
+++ b/doc/todo/BrowserID.mdwn
@@ -6,3 +6,25 @@ Some additional information on BrowserID:
 - <http://identity.mozilla.com/post/7616727542/introducing-browserid-a-better-way-to-sign-in>
 - <http://identity.mozilla.com/post/7669886219/how-browserid-differs-from-openid>
 - <http://identity.mozilla.com/post/7899984443/privacy-and-browserid>
+
+> I would like to see BrowserID offered as a signin option in ikiwiki
+> right next to the buttons for common openid providers.
+> 
+> As far as implementing it goes, I don't want to rely on browserid.org.
+> This means that include.js needs to be shipped with ikiwiki (or in a
+> dependency in a sane world). 
+> 
+> And it means that relying on a https
+> connection to browserid.org to verify the user's identity assertion
+> token is out. (Well, it's probably out anyway, since it relies on https
+> CA security as the only security in that part of the protocol.)
+> 
+> This seems to need an implementation, in perl or an externally callable
+> program (haskell would be fine ;),
+> of <https://wiki.mozilla.org/Identity/BrowserID#Assertion_Verification>.
+> --[[Joey]]
+
+BrowserID, or Mobilla Persona, is shutting down with 30th of November 2016.
+Seen at <https://login.persona.org/about> --[[leg]]
+
+The successor to Persona seems to be [Portier](https://portier.github.io), which is based on OpenID connect. --[[anarcat]]