sknebelit kinda reads like it's more openid connect extension? i.e. it pulls part of the flow into the browser, not replace it? (and a modification like that could very similarly apply to indieauth - although we typically don't distrust the IDP that way?)
