11 sats \ 16 replies \ @dtonon 5 Dec 2022 \ parent \ on: Lightning login app - good or bad idea? bitcoin
Why centralized?
I didn't dig the code, but it just seems a specialized wallet that support lnurl-auth, relieved of monetary functions.
Let's embrace a bit of positivity :)
Why would I go to use a random server that can generate a ln-auth key for me, when I can easily generate my own.
Nowadays we have so many sovereign apps that can do that, without any 3rd party involved.
Just take a look here how many apps already offer LN-auth. Apps that users already used.
https://github.com/lnurl/luds
Just another example: I can use my own LNbits to generate endless LN wallets that I can sign LN-auth.
reply
You are right, there are several wallets which can do lnurl-auth and more. If you are already using them then this app is quite useless for you, unless you want to separate payment and authentication.
Our thesis is that some users are skeptical about paying with bitcoin, but might be very interested in authentication without passwords. By spreading the use of lnurl-auth we might be able to win over many skeptics when they experience the technology first hand.
reply
The only thing to do now is to convince all the web services around the world to use lnurl-auth as one of login method :)
reply
Yep, we are on it!⚡️
reply
This leads to my question. The platforms using lnurl-auth are not where Bitcoin skeptics are spending their time. What are you doing to expand it to other platforms?
reply
We are going to develop a "business side platform" which makes it super easy to add "Login with Get In" to their service.
The motivation for a non bitcoin business to add it could be to attract more users with a smoother login and registration process. And it could also attract bitcoiners to their service which also leads to new users.
What do you think could make businesses interested in adding this login option?
reply
You have to ask why a business would add another SSO option to their site. "Sign in with Google" and "Continue with Facebook" provide companies with a wealth of customer data. What value does Get-ln provide? Is the number of Bitcoin maxis they're missing out on really that substantial?
Personally, I think consumers-side SSO is the wrong angle. Big data aside, people are already too entrenched with their GAMMA logins saved to their browsers. If I want more people to visit my site/platform, I need to create as frictionless a customer journey as I can, and asking retail end-users to pull out their phones every time they want to log in runs counter to that. Most people are ok with the status quo.
That said, I would explore enterprise SSO for employee logins. I would rather use this than mistype my password three times, get locked out, and then wait around for helpdesk to unlock my account.
reply
"Sign in with Google" and "Continue with Facebook" provide companies with a wealth of customer data.
Provide Google and Facebook with data, the site will get the email address and little more.
A business add it because the user is lazy, is incentivated to not create a new password and (wrongly) think to be more secure logging in via a third system.
What value does Get-ln provide?
With LN it can offer the same benefits without feeding these big corporations.
People is starting to pay attention to privacy, could be a huge selling point.
asking retail end-users to pull out their phones every time they want to log in runs counter to that
Not every time, you can remember the user using standard cookies/season stuff and so offer a frictionless experience over the time
What do you think could make businesses interested in adding this login option?
No doubt this sound slogan: "Bitcoiners are usually wealthy users..."
(i.e. greed ;)
reply
This does not use a "random sever".
Unless I am missing something?
reply
ye it just runs the bip32 and bip39 protocol locally on the device
reply
random server
Which random server?
Just take a look here how many apps already offer LN-auth. Apps that users already used. https://github.com/lnurl/luds
So cannot someone create a new one? Aren't anymore in the build mantra? :)
All the listed app are "monetary" wallet with support LN-Auth, this app aims to manage a specific use case removing the economic stuff, and I think can be useful in some areas don't mix ID and money.
reply
Anybody is free to build any app.
I am just saying that is useless to have a dedicated app just for LN-auth when I can use any other LN wallet for that.
And as I said: with a LNbits instance (my own instance) I can have millions of different LN-auth, not just one, centralized in one app, with one identity.
Creativity doesn't mean is automatically useful.
reply
I think you haven't any right to decretate if something is useful in general :)
For example a similar app, for me, is useful because I can split the money context from the login one. Then a login only app has less code, so less attack surface and can be audited easier. As said can extend the login record with useful data (for example alternative method access, a login history, etc.) that you hardly find in a standard wallet.
It's wonderful if you are happy with your LNbits instance, perhaps someone else could prefer a simpler/different/specialized solution. The market chooses, right?
Criticism doesn't mean is automatically useful.
PS: You forgot to reply about the server matter
reply