Skip to main content

Show HN: Cryptid Zero Trust Authentication and Authorization, Open Source Oberon https://ift.tt/c73OFPh

Show HN: Cryptid Zero Trust Authentication and Authorization, Open Source Oberon Oberon makes it possible for a service provider to issue capability tokens to clients in such a way that the service provider never sees the value of the capability token. This prevents the service provider from being able to impersonate the client. Oberon relies upon zero-knowledge proof presentation of the capability token so that the token is never transmitted norrevealed. Instead of the client sending the token to the service—as is done with API tokens today—the client sends a zero-knowledge proof proving that they have a valid capability token issued by the service provider; this is called proof-of-knowledge. GitHub: https://ift.tt/P9HVTx4 Get cryptid: https://ift.tt/UXc14Wj] June 3, 2022 at 11:47PM

Comments

Popular posts from this blog

Show HN: KittenDNS – easy to setup, rule engine, LetsEncrypt compatible https://ift.tt/JEbrc0i

Show HN: KittenDNS – easy to setup, rule engine, LetsEncrypt compatible My goal was to create a DNS server as simple as the LDAP server I've been contributing to (glauth) and here it is: https://ift.tt/i6S4IHQ A few things to know about it: - It is easy to configure using a Toml file - I am using it to bail my coredns/etcd instances when under attack - (yes, it also works as a service location server) - It comes with a simple, plain English, rule engine that doesn't do much at this point - It can be used with LetsEncrypt. I use it to retrieve certificates for my home servers. - RFC: all the nice ones :) Anyway, feedback is welcome. May 16, 2022 at 03:34AM