2020-11-19 UTC
# 
@aaronpk ↩️ Email addresses *are* domain-based auth. I think you’re conflating two different parts of the system. In IndieAuth, the canonical user identifier doesn’t have to be the thing the user enters in a login prompt. This is also true for almost every other authentication system. (twitter.com/_/status/1329280422295977984)