John Siracusa
π€ SpeakerAppearances Over Time
Podcast Appearances
There's going to be like one or two accounts on this thing ever.
I'll just put everything in JSON files.
Um, and pass keys are great.
Cause you don't have to store anything.
The server stores, nothing.
There's no hashed password.
You store a public key.
That's the great thing about pass keys.
One of the, one of the many great things about pass keys is if there's like a data breach or whatever, all they get is public keys thing, information that is literally public.
There's nothing in there.
There's no password hashes on the crack.
There's certainly no plain text, anything.
That's the beauty of pass keys.
I'm like, I have no problem putting, you know, public key pass key stuff in a Jason file and are two, not that anyone cares.
But then it was like, okay, but how do I make the first account?
You know what I mean?
Like if it's a website that doesn't let anybody in, but there's no accounts on it, how do I make the first account?
I'm like, well, I guess I need like a bootstrap mode where like when there's zero accounts, you get an account creation screen.
But as soon as there's non-zero number of accounts, you get a login screen.