Anyone know of a good, comprehensive read on the various sorts of login flows (passwords, oauth, keypairs, magic links, OTPs, 2FAs, and of course wallets,... and now both google and apple are nagging us to do keychains...)

I never used a password manager (it seems like a proper spof to me) and apple or google as the custodian of a keychain seems equally sketchy to me. I know you can go get your actual keychain from your mac and maybe save it offline, but I haven't yet figured out all the fiddly mechanics of making a habit out of all that.

Blogger at ribbonfarm.com, running summerofprotocols.com, host of /gloom ☀️

🤯 fwiw Bitwarden is ugly, open source, feature-complete, free for individuals including sync between mobile and desktop devices, supported by a workable business model for enterprises