

OAuth, "It's complicated." (Interview)
Aug 23, 2021
Aaron Parecki, co-founder of IndieWebCamp and maintainer of OAuth.net, discusses the intricate evolution of OAuth 2.0 to 2.1. He delves into the complexities of Proof Key for Code Exchange (PKCE) and the new Grant Negotiation and Authorization Protocol (GNAP). The conversation highlights how personal data tracking can enhance memory retention and the role of personal websites in the IndieWeb movement. Parecki emphasizes the importance of security in OAuth flows and how simplified authentication can benefit developers and users alike.
AI Snips
Chapters
Books
Transcript
Episode notes
Early Tracking
- Aaron Parecki has been tracking his location since 2008, initially fascinated by personal data collection.
- He even tracked his school commute times as a child using logbooks, predating GPS tracking.
Tracking Motivation
- Aaron's motivation for tracking isn't just self-discovery; it's about creating a personal data archive.
- This archive helps him geotag old photos, remember past events, and provide context to his online presence.
Passive Tracking
- Aaron intentionally avoids letting tracking influence his movements, aiming for passive data collection.
- He wants the data to reflect his natural behavior, not a gamified challenge to visit every location.