willneedit / Arteranos

VR social app in a decentralized server-client model
Mozilla Public License 2.0
2 stars 1 forks source link

Remove third party login #128

Closed willneedit closed 7 months ago

willneedit commented 7 months ago

With the introduction of the asymmetric keys for authentication, meaning passkeys, passwords and SSO is technically obsolete. The öublic key doubles as the ID, and the private key resides on Your device. Simply copying the public key for an identity theft wouldn't fly without for the corresponding private key.

So, a third party login is not necessary, rather another angle of attack.