Re: [arch-d] Proposed IAB program on Wholistic Human-Oriented Discussions on Identity Systems (WHODIS)

[Christopher Wood <[e-mail]>]

> On Jul 17, 2023, at 12:07 PM, Eric Rescorla <[e-mail]> wrote:
> 
> 
> 
> On Mon, Jul 17, 2023 at 9:02 AM Christopher Wood <[e-mail]> wrote:
> 
> > Second, I think that you should probably try to focus on some subset
> > of the landscape, which, as you say, is vast. As a super-rough categorization,
> > you might think of identity being broken down into:
> > 
> > - Primary authentication via public keys, passwords, passkeys, etc.
> > - Secondary (often called federated) identity systems like FedCM,
> >   Google Auth, Facebook Connect (or whatever it's called now), etc.
> > 
> > These seem superficially similar, and of course RPs will often accept
> > both (e.g., log in with your password or Google Auth), but technically
> > they are quite different. I would focus on the second category and
> > eschew the first.
> 
> This is an interesting take. Is your suggestion to focus on the second due to the well-defined nature of the first group?
> 
> Yes, and that there is already very active standards work in that area.

Got it — that makes sense to me.

Best,
Chris