Authentication(Identity)

Basics

• Zero-Width fingerprinting(https://github.com/vedhavyas/zwfp)
• Text Watermark(https://github.com/zengkan0703/text-watermark)

Certificate Authorities

• Let’s Encrypt(https://letsencrypt.org/)
• Buypass(https://www.buypass.com/)
• ZeroSSL(https://www.buypass.com/)
• Introducing another free CA as an alternative to Let’s Encrypt(https://scotthelme.co.uk/introducing-another-free-ca-as-an-alternative-to-lets-encrypt/)
• Here’s another free CA as an alternative to Let’s Encrypt!(https://scotthelme.co.uk/heres-another-free-ca-as-an-alternative-to-lets-encrypt/)

OAuth

• OAuth 2.0 for Native Apps(https://datatracker.ietf.org/doc/html/rfc8252)
• The Modern Guide to OAuth(https://fusionauth.io/learn/expert-advice/oauth/modern-guide-to-oauth)

WebAuthn

• What is WebAuthn and why should you care?(https://fusionauth.io/blog/2022/09/13/what-is-webauthn-why-do-you-care)
• A better alternative for securing our sensitive information online(https://webauthn.guide/)

World ID

• Introducing World ID and SDK

Passkey

• What is a passkey?
• Introducing passwordless authentication on GitHub.com

Best Practices

• Detect device, and render view according to detected device type.
  • User Agent
• Logto (https://github.com/logto-io/logto)
  • helps you build the sign-in, auth, and user identity within minutes.
• Universally Unique Lexicographically Sortable Identifier(https://github.com/ulid/spec)
• Auth.js
  • https://authjs.dev/
  • Authentication for the Web.
• Useragents.me
  • An auto-refreshing list of the latest and most common useragents seen on the web across all device types, operating systems, and browsers.
• Cloudflare is free of CAPTCHAs; Turnstile is free for everyone

What’s new

• Should you use Let’s Encrypt for internal hostnames?(https://shkspr.mobi/blog/2022/01/should-you-use-lets-encrypt-for-internal-hostnames/)