[Openid-specs-ab] OP Commands - alternative approaches for tenancy and bulk transfer

[Dick Hardt]

+ Karl

Wayne: I'm not sure you understand how it works -- but thanks for sharing!

I opened an issue for OpenID Provider Commands
https://github.com/openpubkey/opkssh/issues/43

I emailed the security@ list about the security issues related to relying
on email addresses as the identifier and am now emailing back and forth
with them on that.





On Tue, Mar 25, 2025 at 3:00 PM Wayne Chang <wyc at fastmail.fm> wrote:

> With this gadget, OP Commands can be self-hosting.
>
>
> https://blog.cloudflare.com/open-sourcing-openpubkey-ssh-opkssh-integrating-single-sign-on-with-ssh/
>
> Looks like we are heading back full circle to the glorious 80s. 😎
>
> On Fri, Mar 7, 2025, at 6:09 AM, Dick Hardt via Openid-specs-ab wrote:
>
> Hey
>
> Karl and I are looking forward to rolling up our sleeves and working on OP
> Commands.
>
> While we have modelled OP tenants as a claim with a tenant identifier or
> type of tenant, we know there may be a better model. If someone has an idea
> for a potentially better model, you don't need to write up a draft -- you
> can just write up a clear explanation that we can all review and discuss.
>
> I plan on writing up the other options we looked at for sending a large
> response so that we can have a discussion on that topic. I also plan on
> writing a PoC using SSE and will share that here.
>
> /Dick & Karl
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20250326/136d66b9/attachment.htm>