5 ms·

FIDO will soon have competition in the form of SQRL which is an interesting concept. http://sqrl.pl/ http://sqrl.pl/

mixmastamyk 11y ago
Yep, it's a nice design. I'm looking at adding it to my next site. https://en.wikipedia.org/wiki/SQRL https://en.wikipedia.org/wiki/SQRL
- newman314 11y ago
  I went to read up more on SQRL and found this. http://security.stackexchange.com/questions/43374/could-sqrl-really-be-as-secure-as-they-say http://security.stackexchange.com/questions/43374/could-sqrl...
  - mixmastamyk 11y ago
    Shame the top answer is so jealous of Gibson, who isn't always right (who is?) but have never heard him boastful or say an unkind word as the links allege.
danieldk 11y ago
SQRL is vulnerable to phishing attacks: https://www.cl.cam.ac.uk/~fms27/papers/2014-JenkinsonSpeWarETAL-phish.pdf https://www.cl.cam.ac.uk/~fms27/papers/2014-JenkinsonSpeWarE...
- technojunkie 11y ago
  This paper is nearly 2 years old from 2014. One can probably assume this has been addressed and fixed by now, although I have on proof of that.
StavrosK 11y ago
SQRL has been around for years with no traction, what changed now?
- technojunkie 11y ago
  SQRL has been in development for years, not officially released yet. Right now they are in polishing phase and making sure no major flaws exist. So, what changed? Nothing. Once SQRL is officially released, it has the potential to take on FIDO and others.
mastax 11y ago
FIDO 2 looks a lot like SQRL, and since the 'FIDO Alliance' has influential members[1] it's much more likely to get adopted. [1]: https://fidoalliance.org/membership/members/ https://fidoalliance.org/membership/members/
- technojunkie 11y ago
  Unfortunately, SQRL has been in development by a small group of people in a tightly controlled development cycle. I don't want it to continue to be vaporware as it seems like it'd be an awesome solution and competitor, but you are right that FIDO is more likely to be adopted. It's possible that SQRL could affect FIDO's development in positive ways nonetheless.

Yep, it's a nice design. I'm looking at adding it to my next site. https://en.wikipedia.org/wiki/SQRL https://en.wikipedia.org/wiki/SQRL

newman314 11y ago
I went to read up more on SQRL and found this. http://security.stackexchange.com/questions/43374/could-sqrl-really-be-as-secure-as-they-say http://security.stackexchange.com/questions/43374/could-sqrl...
- mixmastamyk 11y ago
  Shame the top answer is so jealous of Gibson, who isn't always right (who is?) but have never heard him boastful or say an unkind word as the links allege.

danieldk 11y ago

SQRL is vulnerable to phishing attacks: https://www.cl.cam.ac.uk/~fms27/papers/2014-JenkinsonSpeWarETAL-phish.pdf https://www.cl.cam.ac.uk/~fms27/papers/2014-JenkinsonSpeWarE...

technojunkie 11y ago
This paper is nearly 2 years old from 2014. One can probably assume this has been addressed and fixed by now, although I have on proof of that.

StavrosK 11y ago

SQRL has been around for years with no traction, what changed now?

technojunkie 11y ago
SQRL has been in development for years, not officially released yet. Right now they are in polishing phase and making sure no major flaws exist. So, what changed? Nothing. Once SQRL is officially released, it has the potential to take on FIDO and others.

mastax 11y ago

FIDO 2 looks a lot like SQRL, and since the 'FIDO Alliance' has influential members[1] it's much more likely to get adopted. [1]: https://fidoalliance.org/membership/members/ https://fidoalliance.org/membership/members/

technojunkie 11y ago
Unfortunately, SQRL has been in development by a small group of people in a tightly controlled development cycle. I don't want it to continue to be vaporware as it seems like it'd be an awesome solution and competitor, but you are right that FIDO is more likely to be adopted. It's possible that SQRL could affect FIDO's development in positive ways nonetheless.