OAuth originally assumed clients would be pre-registered at an authorization server. Before an app can talk to an OAuth server, a developer signs up for an account, registers the client by providing the name and logo and other client inform…
Hi all, I owe the working group a review of the "OAuth Profile for Open Public Clients", and apologies for sending this so late after the last IETF meeting, and the night before this IETF meeting. Please note that I have not followed all of…
This is my "life stack" - the tools, apps, services and other things I use to manage my work and life. Last updated November 2021. I only add things to this page if I feel comfortable personally recommending them. You can help me out by fol…
Cross-domain access is everywhere in today's software landscape. Whether you look at enterprise SaaS applications, AI agents interacting with user data across multiple platforms, or "integrated experiences" pulling information from a calend…
@aaronpk So text is real text in the screenshot and you can scroll webpages? That would be incredibly sick! Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consu…
@aaronpk As long as you're not starting to buy "audiophile headphones"… It's a slippery slope! @aaronpk Never heard of this before either. Is there any hardware supporting it? @aaronpk I think I have some IEMs that came with a cable with su…
@aaronpk At the 38c3 (a German hacker event at the end of last year), there was ISDN powered by an old EWSD . Many people brought their DECT phones, just like every year. There were even analog phones. I only used SIP on my smartphone. http…
No, you're wrong, tomorrow is Tuesday 😉 Can we get a raincheck on that until say... next week/year? Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult abou…
Let's not overthink auth in MCP. Yes, the MCP server is going to need its own auth server. But it's not as bad as it sounds. Let me explain. First let's get a few pieces of terminology straight. The confusion that's happening in the discuss…
I recently got access to the BlueSky beta, and decided to poke around to see what it's all about. I will save the details of what it is and how I feel about it for a different post. However, one of the first things you do when you sign up i…
It is currently 3:31pm in my current timezone, PDT. Here are some good ways to contact me directly. To get in touch about livestreaming or YouTube related topics, please see my contact info here: aaronpk.tv/contact. For longer-form communic…
Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video…