Recent submissions

Comment · 4 years ago
Comment · 4 years ago
Comment · 5 years ago
Comment · 5 years ago
Comment · 5 years ago
Especially in British Columbia. The government is way forward in implementing "TrustOverIP.org" type DID/VC/ETC systems for interacting with the government
Comment · 5 years ago
Comment · 5 years ago
Comment · 6 years ago
On of my favorite memories is talking about this RFC with Jon Postel. RIP.
Comment · 6 years ago
I commend you for the attempt...

But the issue you are trying to mitigate (heavy tokens due to complex scope strategy) is a symptom of a bigger problem that has caused OAuth-using folks to scratch their heads for a long while. (of course, also realtes to non-Oauth JWTs)

Tldr: The new "Cloud native" way of solving for this is to not push your "Permissions" thru the token.

Basically, you limit the scopes included in a token to just a few basic ones (essentially assigning the user to a "Role" - think RBAC)....

... and then you use a modern Authorization approach (e.g. CNCF Open Policy Agent) to implement the detailed/fine grain authorization.

Its hella cool, declarative, distributed, and infinitely scalable...

... and it obviates the whole "heavy JWT" issue before it starts....

Source: This is what I do day in day out in my day job....

Comment · 6 years ago
My current favorite Shiny new thing: www.Grain.co
Comment · 6 years ago
I'll look to see if there is anything I can share publicly...
Comment · 6 years ago
LOL.... I know what you are saying,

It's interesting how different people process information.

All I can say is that it works for me.... and I find it to be highly impactful on my co-workers etc.

There is something about capturing nuance that "multimedia" really helps with....

So my mission is to reduce the effort it takes for me to do this to less then it takes to just write up and share notes...

Comment · 6 years ago
I do it mostly so I don't have to repeat myself. :)

I use the clips so that others can gain from the kernals of wisdom those clips provide... without having to commit to some portion of an hour to find the kernal themselves.

Saves everyone time and enforces compliance to decisions made )

Also, of course, by manually editing down a deeply technical discussion from an hour to 20 minutes helps me REALLY listen and understand what the speaker is saying....and so it also helps me to continue improve my knowledge...

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton