Skip to content

Feature request: passwordless authentication or Salsa SSO

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The majority of folks have too many passwords, and mentors.debian.net is not
helping matters. It would be nice if it could integrate with Salsa for SSO
to reduce the number of credentials users require. This would also offer
some additional benefits:
 * OpenPGP keys potentially could be imported directly from folks' Salsa profiles
 * Users would be able to use multi-factor authentication if they so wish

Alternatively, if Salsa is not a good option, passwordless authentication
could be done using FIDO 2 security keys via the WebAuthn API. Yet another
option, one that's more flexible, is to use client certificates. Perhaps,
to make certificate management simpler, Debexpo could check if the raw
public key of the X.509 certificate matches the raw public key of the
OpenPGP key on file.

Note that it's possible to accept client certificates for authentication
without having to run a CA.

GnuPG makes it easy to generate X.509 certificates from OpenPGP keys
and vice versa, and they can then be readily exported into browsers
(or, with Scute or another PKCS#11 module, they'll be imported
automagically).

Thanks for your consideration!
-----BEGIN PGP SIGNATURE-----
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=PhVX
-----END PGP SIGNATURE-----
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information