IndieAuth - Distributed Web Identity

Who am I?

Your personal domain is your identity
Sign in to websites without creating an account
Easy for users to implement, just add a rel=me link to your Github profile (no really, try it! Full instructions on indieauth.com)

Supports new and extended authentication mechanisms with no changes to the consuming site or the identity
- Mozilla Persona
- SMS Verification
- Google Authenticator (TOTP)
Using TOTP or SMS you can even sign in on an untrusted computer without entering your password!

The IndieAuth server requests aaronparecki.com and looks for known auth providers
Presents me with a list of options to choose from
I choose TOTP, and enter the code shown on my device
The IndieAuth server verifies the code entered and returns an auth code
My website verifies the auth code with indieauth.com and starts a session

But wait! That requires you to have a pre-existing relationship with indieauth.com in order to have a shared secret to use for the TOTP algorithm!

- You, just now

The IndieAuth server requests aaronparecki.com and looks for known auth providers
Presents me with a list of options to choose from
I choose Foursquare, and am sent over to Foursquare to authenticate
The IndieAuth server verifies my Foursquare login and returns an auth code
My website verifies the auth code with indieauth.com and starts a session

So this relies on indieauth.com to run this service?

- You, just now (probably)

			<html lang="en">
			<head>
			    <title>Aaron Parecki</title>
			    <link rel="indieauth" href="https://indieauth.com">
			</head>