# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 6
# self = https://watcher.sour.is/conv/jfk2upq
Today I found this passwordless alternative by Steve Gibson
https://sqrl.grc.com/pages/what_is_sqrl/
@eaplmx i'd rather have client certificate auth tho ;P
@akoizumi I like it, buuut I think it's not so easy to implement from the server side, and to setup for most users.

That said, it's a classic alternative
@eaplmx CSS Battle has a passwordless login, I don't know the implementation but it basically send you and email where you click a link and you're in.
@justamoment thanks for sharing! magic links have a few problems, although it's a useful way to avoid passwords. I like it for some kind of users.

I wrote a bit about different approaches for Dynamic passwords and passwordless systems if anyone here is interested

https://text.eapl.mx/promoting-the-use-of-dynamic-passwords
@eaplmx interesting post, thank you.

I too configured WebAuthn on a couple of sites but it's used in replacement to the MFA OTP which I find stupid.

Except for some cases, I guess we can focus on what works for us personally before looking at a way to help other, something become generally used only once it's used by enough people, then it'll get traction and become better and simpler for non techy people.