iiinova — where your digital self keeps evolving

Mark Foster @mfoster.io · 28/09/2026

I remember when plc was just a temporary placeholder. It’s funny how that worked out.

1240

Mark Foster @mfoster.io · 28/09/2026

Now we need safari on iOS.

110

Mark Foster @mfoster.io · 28/09/2026

I am built my own native wrapper with AI and I have been build several Native Web Apps with it.

000

Reposted by Mark Foster

Sam Goto @sgo.to · 01/09/2026

@thisismissem.social @divy.zone and I recently went through an exploration of how the browser can help you login to websites with atproto accounts. We recently presented to the FedID CG and here is a sneak peek in case you couldn't join! This is early but we'd love your input before we go too far!

2227350

Reposted by Mark Foster

Eiji Kitamura / えーじ @agektmr.com · 09/07/2026

Personally, the most exciting auth-related feature since passkeys: Chrome just announced an origin trial for the Email Verification Protocol (EVP).

1135

Mark Foster @mfoster.io · 06/07/2026

Decentralized, Distributed, and Orthogonal systems are full of people with passion and intensity, it’s a complicated fusion. youtu.be/tx4Bhrxzuuw We are all catapulted towards death, our shared work in the wild is our legacy in segmented glances, laced in silver.

000

Reposted by Mark Foster

Mark Foster @mfoster.io · 30/05/2023

Every night! 🌒

021

Reposted by Mark Foster

Mark Foster @mfoster.io · 09/04/2026

🎧🎵🎶🎼☁️🚶🏻‍♂️Today, I took a walk in the clouds, and in the daylight I could swear we’re the same. But I’m just an ordinary human. Ordinary ways. I’m just an ordinary human, but I don’t feel so ordinary today. There'll be peace in the city tonight, and when I'm gone, I hope they get it right.

youtu.be

Ordinary Human

YouTube video by OneRepublic - Topic

001

Mark Foster @mfoster.io · 28/06/2026

We need a good protocol registry for uri schemes www.iana.org/assignments/... and mime types www.iana.org/assignments/... maybe something that maps to well-known folders as well. www.iana.org/assignments/...

iana.org

100

Reposted by Mark Foster

Piccalilli @piccalil.li · 25/06/2026

It's the summer of Standard.site and overwhelmingly, we've heard folks find the process complicated so Declan Chidlow is here to break the process down into something rather straightforward for you. piccalil.li/blog/publish...

piccalil.li

Publishing on the Atmosphere with Standard.site

It's the summer of Standard.site and overwhelmingly, we've heard folks find the process complicated so Declan Chidlow is here to break the process down into something rather straightforward for you.

47620

Reposted by Mark Foster

Thomas Steiner @tomayac.com · 23/06/2026

Very excited to share a guest post I wrote for the Hugging Face 🤗 blog! Experimenting with the proposed Cross-Origin Storage API in Transformers.js! 👉 huggingface.co/blog/cross-o... This proposed API has the potential of revolutionizing the Web—a little bit. Learn more: github.com/WICG/cross-o...!

huggingface.co

Experimenting with the proposed Cross-Origin Storage API in Transformers.js

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

082

Reposted by Mark Foster

Rowan Merewood @rowan.fyi · 24/06/2026

This is such a clearly structured set of #security guidance from @openwebdocs.org ! Intuitive progression through attacks, defence with specific web APIs, threat modelling, and then I'm extra fond of there being a whole section on authentication. openwebdocs.org/content/post...

The infographic displays four security categories with their corresponding topics:

* Attacks: Clickjacking, Cross-site request forgery (CSRF), Cross-site leaks, Cross-site scripting (XSS), Insecure Direct Object Reference, Manipulator in the Middle (MITM), Phishing, Prototype pollution, Server Side Request Forgery, Subdomain takeover, and Supply chain attacks.
* Defence: Certificate transparency, Content Security Policy (CSP), Fetch metadata, Input validation, Mixed content blocking, Operational security, Same-origin policy, Secure contexts, Subresource integrity, Transport Layer Security (TLS), and User activation.
* Threat modelling: Threat modeling guide, Example threat model, Threat model for a PWA, and Frameworks and tools.
* Authentication: Federated Identity, One-time passwords (OTP), Passkeys, Passwords, and Session management.

0135

Reposted by Mark Foster

Sam Goto @sgo.to · 19/06/2026

An interoperable EVT implementation appears in the wild by @rowan.fyi !!! rowan.fyi/made/email-p... rowan.fyi/made/email-v... Yay for interoperable relying parties and zero marginal costs!!! @paul.kinlan.me @nmarkoborodova.bsky.social

062

Reposted by Mark Foster

Sam Goto @sgo.to · 28/06/2026

I've been pondering about having the browser resolve at:// URLs. I have been thinking that we could introduce a DNS-like (maybe DNS itself?) entity that goes from did:plc to URLs, the same way DNS goes from names to IP, and have the browser depend on that similar to how it depends on a DNS server.

5132

Reposted by Mark Foster

Wes @notwes.bsky.social · 04/05/2026

devEngines started as @geoffreybooth.bsky.social and I in DMs 2 years ago. It's now supported in @npmjs.bsky.social & @pnpm.io, and later this month will be our recommended way for developers at Netflix to define runtime and package manager versions in their projects. docs.npmjs.com/cli/v11/conf...

docs.npmjs.com

package.json | npm Docs

Specifics of npm's package.json handling

4449

Reposted by Mark Foster

Mark Foster @mfoster.io · 19/04/2026

Nostr layers could fix this. I could imagine a local first relay with signed objects that shotgun on relays and under the hood having a PDS repository as a large collection on a cloud server somewhere.

011

Reposted by Mark Foster

David Thompson @flockofbirbs.bsky.social · 19/04/2026

Its simply too expensive to setup alternatives to the bluesky relay and appview. If there's only a handful of them then it's nearly as easy for a government to block all access, or for a ddos to take out a large portion of the network, etc. then if there was just a single provider.

42910

Mark Foster @mfoster.io · 19/04/2026

011

Mark Foster @mfoster.io · 16/04/2026

I never know what day it is anymore.🥴

000

Mark Foster @mfoster.io · 16/04/2026

I was reading a book today and this reminded me of something. Can you guess what it is? 🧐

000

Mark Foster @mfoster.io · 12/04/2026

@sgo.to @pfrazee.com “Sign in” with @username “Connect to” with @handle? Thoughts? 💭

100

Mark Foster @mfoster.io · 12/04/2026

@sgo.to and @pfrazee.com What are your thoughts on @handle versus @username? Since most users are used to signing in with a username, the terminology can be confusing. I’m trying to balance everyday users’ understanding with technical accuracy. E.g., “Connect to another app/PWA using your handle.”

210

Mark Foster @mfoster.io · 11/04/2026

I have been thinking of a Username.id namespace and @interop could be an exchange protocol. (LDUX) Linked Data User eXchange. I have even gone down the Nostr rabbit hole to gain some overlapping ideas from key management and locally signed objects. I can envision a local first vault hybrid scenario.

username.id

futureinternet.io

The future of the internet is decentralized and you are in control.

000

Mark Foster @mfoster.io · 11/04/2026

Tamper‑proof preservation requires signing real‑world artifacts with cryptographic keys before they reach the cloud. A local‑edge TEE uses hardware attestations and assertion claims to protect history and ensure verifiable timelines in a post‑AI world. a16zcrypto.com/posts/articl...

000

Mark Foster @mfoster.io · 11/04/2026

I’ve always liked the idea of having my data locally and Self Sovereign with the phrase “Connect”, “Connect To <Thing>”. Or even “Link”, “Link To <Thing>”. Link might be too technical for the average person though.

100

Mark Foster @mfoster.io · 09/04/2026

Yes, I’ve been thinking a lot about what signed, verifiable, and content-addressable WebComponents could unlock for auditable web ecosystems.

010

Mark Foster @mfoster.io · 09/04/2026

youtu.be

Ordinary Human

YouTube video by OneRepublic - Topic

001

Mark Foster @mfoster.io · 08/04/2026

Server‑side rendering of Web Components thanks to the Declarative Shadow DOM. web.dev/articles/dec... developer.mozilla.org/en-US/blog/m...

120

Mark Foster @mfoster.io · 07/04/2026

We can all make a difference. On this day in 1969, a 25‑year‑old grad student quietly drafted a document that would shape ARPANET. He wrote it overnight in a bathroom so he wouldn’t wake anyone. That late‑night effort became one of the early stepping stones toward the modern Internet.

020

Mark Foster @mfoster.io · 07/04/2026

The ability to adapt and persevere context is meaningful. It’s a struggle when many SEO gurus sell a task that sometimes doesn’t fit the context at hand.

020