3 ms·
This is inherently a password in the form of a url similar to using REST which still requires a password to obtain the link in the first place (email) I only se
by fosco 11y ago
This is inherently a password in the form of a url similar to using REST which still requires a password to obtain the link in the first place (email) I only see this as a partial solution.
- eximius 11y agoAll non-PK cryptography eventually boils down to a 'password' if you call it that. But this isn't a password, it's a shared secret. Which IS a good solution (not GREAT, but better), it just shifts the problem into communicating the shared secret. This is where TOTP comes in for most 2FA implementations. This particular scheme just uses email.