Gregory's Server
Sign-in with Mastodon will be quite configurable!
One challenge is to prevent abuse like a single Mastodon account using this on dozens or hundreds of Pixelfed instances.
I got that handled though, using a centralized list of masto webfingers that are incremented upon sign-in, we can enforce a max limit of uses!
Let me know your thoughts, boosts appreciated 😁 #pixelfed #signInWithMastodon
@dansup
really into this idea, it does raise questions with identity as you say. why not make it more explicit than a repository at a different level than instance identity? eg. a link between accounts across instances in the same way the rel="me" links work in account metadata. identities indicate which pixelfed identities are theirs in some publicly indexable way, so if someone is trying to use it for abuse by eg. signing in across hundreds of pixelfed instances it would be very visible and moderatable.
or, I guess as a question, why as a centralized repository rather than as account-level metadata?
@dansup
really into this idea, it does raise questions with identity as you say. why not make it more explicit than a repository at a different level than instance identity? eg. a link between accounts across instances in the same way the rel="me" links work in account metadata. identities indicate which pixelfed identities are theirs in some publicly indexable way, so if someone is trying to use it for abuse by eg. signing in across hundreds of pixelfed instances it would be very visible and moderatable.