@streetcoder @virgil_tibbs @_slowly @kuketzblog
Ich würde gerne die #eID der #Schweiz, die #Swiyu-app im #fdroid sehen.
https://github.com/swiyu-admin-ch
https://www.eid.admin.ch/de
Sie kann auch #Altersverifikation
@streetcoder @virgil_tibbs @_slowly @kuketzblog
Ich würde gerne die #eID der #Schweiz, die #Swiyu-app im #fdroid sehen.
https://github.com/swiyu-admin-ch
https://www.eid.admin.ch/de
Sie kann auch #Altersverifikation
Blogged: Add application security to the swiyu generic management verifier APIs using OAuth
#aspnetcore #oauth #swiyu #swiss #openid #yarp #aspire #container #api #iam #security #dotnet
The article looks at implementing security using OAuth for the swiyu Public Beta Trust Infrastructure generic containers. The container provides endpoint for OpenID verification and the management …
Blogged: Secure the swiyu container using a YARP proxy
https://damienbod.com/2026/02/09/isolate-the-swiyu-public-beta-management-apis-using-yarp/
#swiyu #yarp #aspire #aspnetcore #dotnet #identity #network #oauth #openidconnect #oidc
Blogged: Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR
#dotnet #aspnetcode #oidc #oauth #par #dpop #identity #duende #aspire #oss #iam #swiyu
This post looks at implement client assertions in an ASP.NET Core application OpenID Connect client using OAuth Demonstrating Proof of Possession (DPoP) and OAuth Pushed Authorization Requests (PAR…
I'm very happy to say that Ubique, working on https://www.heidi-universe.ch/en/index.html, told me to use `--release` with `cargo-test` :)
Now our benchmark looks quite different from the last one:
https://eid-privacy.github.io/2026/01/09/poc-report.html
Before: Noir is as fast or faster than Docknetwork
Now: Docknetwork is as fast or much faster than Noir
The next thing I need to find out is how to run benchmarks directly on a mobile phone. Is there some kind of server I can tap into with a github workflow?
Blogged: Digital Authentication and Identity validation
https://damienbod.com/2025/12/20/digital-authentication-and-identity-validation/
#oidc #identity #iam #swiyu #eid #oauth #dpop #openid #security #ecollecting #authentication #loa #loi #vc #oauth2 #swiss #ch #cybersecurity
If you're working in the e-ID space you might have heard of the "Longfellow" and "Crescent" papers, which implement zero-knowledge proofs on existing credentials. We wrote a deep-dive with @elgharee @clemhumb into these papers and compare them here:
https://eid-privacy.github.io/wp0/2025/11/28/crescent-longfellow-showdown.html
TLDR: very impressive work, but very difficult to reproduce as a normal software dev.