Hayden B
Hayden B
@wlynch suggested another format which would be using GHs noreply format used for private emails, `[email protected]`. This might be the best of both worlds - We get username, we get...
I wrote like 5 versions of this comment going back and forth on what to do, so everything I'm going to say is a brain dump and I don't have...
One other idea is publishing the mapping via the /configuration endpoint so it's discoverable via clients. As part of cutting a new release, we would also update some yaml/json configuration...
Hey, thanks for reaching out. Audience not being customizable is a blocker, so we will need to ask bitbucket to support customized audiences. The subject of the certificate will need...
cc @trevrosen @feelepxyz @laurentsimon who might also be interested
Can you specify your certificate chain?
An incompatible key usage means that the x509 library failed to build a valid chain. I would confirm that your root and intermediate specifies `Certificate Sign` and `CRL Sign` only.
Given that there's a 1-1 mapping between issuer value and verifier, is this needed? If I understand the request, it would be to add a configuration field to check that...
This is super neat work, but there’s a few things to consider before pursuing this further: * we need to consider the threat model and address if ZKP actually solves...
For what we currently support, google and Microsoft don’t allow email reuse. One of the requirements from another issue for OIDC providers was disallowing reuse. Unsure about GitHub, but I...