Boris Mann

Open Source. Community. Decentralized Web. Building dev tools at Fission. Cooks & eats.



IndieAuth is an IndieWebIndieWeb
The IndieWeb wiki is the main hub for information.

The IndieWeb is a community of individual personal websites, connected by simple standards, based on the principles of owning your domain, using it as your primary identity, to publish on your own site (optionally syndicate elsewhere), and own your data. more »

IndieWeb standards include:

[[Webmention]] to notify other websites
[[WebSub]] to get real time updates on other sites’ new content
[[Micropub]] to publish to your site with an ease...
component that lets you sign in to things using your own website. The main instance is at, and the spec is at Created and maintained by @aaronpk

From the spec:

IndieAuth is a decentralized identity protocol built on top of OAuth 2.0.

This allows individual websites like someone’s WordPressWordPress
An excellent PHP-based blogging tool, with all sorts of advanced features. Easy installation, easy upgrades, nice typographical formatting.
Only downside right now is that it doesn’t support auto-thumbnailing or a media directory for selecting already uploading pictures.
, MastodonMastodon
Mastodon is an open source federated micro-blogging platform.
The Mastodon documentation site covers what a microblog and federation are:

Similar to how blogging is the act of publishing updates to a website, microblogging is the act of publishing small updates to a stream of updates on your profile. You can publish text posts and optionally attach media such as pictures, audio, video, or polls. Mastodon lets you follow friends and discover new ones.
, or Gitea server to become its own identity provider, and can be used to sign in to other instances. Both users and applications are identified by URLs, avoiding the need for getting API keys or making new accounts.

From the .com: provides an IndieAuth server for your website that authenticates you using your existing social accounts. First you link from your website to one or more authentication providers such as GitHub or a PGP key, then when you enter your domain name in the web sign-in form on websites that support IndieAuth, you can sign in without using a password.

I currently use my Github account to login. More third-party services used to work (like Twitter), but don’t anymore. I’ve been meaning to explore the private key support, but really, it’s very specifically PGP support.