HiveSigner, Hive Keychain, HiveAuth or Enter Your Key On A Site??? (later entry: PeakLock - see update inside about that oversight)

image.png

How do you login to Hive App Sites?

Choose the primary method you use on the poll.


Post Update Upon Receiving Some Comments:
It was pointed out to me in comments on this post, that I overlooked PeakLock/PeakVault on the poll list, my bad, oversight, write it in below in the comments if you prefer it. Sorry about that, PeakLock guys. I am not able to edit the running poll to add it, but I also understand this keyset may only work on PeakD products? Please elaborate in comments to fill in missing information here or incorrect information about Peak key tools.

Also, I was shown an excellent option I am now investigating for integration called the Hive All In One Auth tool, which will solve the code problems shown below in this post, on my side, and still allow users to pick any kind of Hive auth tool for themselves that exists as far as the makers of HAIOA are aware of, and allow customization to add more yourself if they miss one or haven't added it themselves yet or whatever.


I know that in our eco-system, the developer skills of the app builders range from expert to people who never even did any HTML markup before building their things.

As a result, they often will use whatever key auth method they can figure out, or conversely go all the way and integrate ALL the login tools we have available.

This means that as users, we have to set up our Keychain extensions, our HiveSigner logins, Our HiveAuth mobile installs or Keychain Mobile installs, etc. In order to be able to login to all the things using whatever methods the app allows or accepts.

In general, making apps that use all the potential login methods that exist when you make your app is probably the right answer, simply because you don't want to lose users to not having the right key management tool installed or setup or signed up for or whatever.

But as an app developer, I will share this insight into our work. For every kind of key auth signin tool we support, we have to duplicate the login/logout/signup/register and events such as posting or voting or commenting to every single one of those.

This leads to time consuming code creation and testing, delaying new features to some degree. It also means there could be differences introduced into the code causing different results depending on the keychain you logged in with, and the ensuing version of the sites internal code that it runs as a result.

It means that you have to do an extraordinary amount of work to make methods in multiple versions, compared to an old school website "name and password" site-wide login that only required one method of checking user authenticity before sending that photo of your kid to his grandma on Facebook.

It's familiar and easy. We can't do that here, because we're dealing in money and privacy and all the blockchain/crypo things, so of course, we also have multiple vectors to managing your keys and identity info on the chain. As it SHOULD be...

But because of all that, right now to support everyone, for logins and chain based activities on our apps, we have to write code that does stuff like this:

if(keychain){
// do keychain things

} else if (HiveSigner) {
// do hivesigner things

} else if (HiveAuth) {
// do HiveAuth things

} else if (Enter your username/key local auth)(
// do even more things and ways,
// this can be risky for all,
//because now some app you may or may not be able to trust, has your keys

} else if (whatever_else_comes_next) {
// whoever makes the next key/wallet, like the guys working on MetaMask integration now

} else {
// this could literally extend forever as new key management things come to life
}

So I am curious, is there a clear leader in auth tools here, and is it even worth it to code and support for the others anymore? Would an app survive if it simplified itself to a single Authentication mechanism?

What do you think? Tell me in the comments, but vote for the one you prefer and would like to use everywhere if you could.

It's just a thought experiment. It's clear I will have to support them ALL in my App builds, though I will never support the direct entry of keys into app sites, as I personally do not want to be responsible for your private keys and don't want to be accountable for their management and handling in my software.

So whatcha thinkin', y'all? Let me know below!

@SirCork
Founder & Developer: @HiveStreams
@PolleNation Hive Witness Partner
Developer: Dead Follower Tools & When Lambo?
Co-Founder: @YouAreHOPE


image.png
1LOGO_BloggerSans_BarlowCondensedReg_HiveLogo_master_whiteBkgrd_yellow.png
Join the Hive Pollen Nation!
Vote @PolleNation as your witness.
Join the PolleNation Discord
We appreciate your support!

image.png
Hey if you like this stuff, vote for our witness @pollenation ! That surely would help!

HiveSigner, Hive Keychain, HiveAuth or Enter Your Key On A Site???
You may select 1 choices
HiveSigner
Hive Keychain
HiveAuth
Direct Username/Private Key Entry at the App Site
H2
H3
H4
3 columns
2 columns
1 column
Join the conversation now
Logo
Center