4 ms·
Tiqr predates it and does the same thing. However, U2F and UAF from FIDO alliance are the new protocols that are being standardized, and they're looking good to
by Natanael_L 11y ago
Tiqr predates it and does the same thing. However, U2F and UAF from FIDO alliance are the new protocols that are being standardized, and they're looking good too.
It is even designed to inherently resist tracking across services by using unique keypairs per service in a clever way. No device identifier is ever shared.
- ronancremin 11y agoAccording to Steve Gibson (SQRL's inventor) tiQr is quite different: "It superficially appears to offer a user experience similar to SQRL. However, as is every other such system, what's going on is actually far more complex and involves/requires establishing “shared secret” account credentials with the authenticating website. As they explain on their technical page, TiQr is based on the OATH (open authentication) OCRA protocol suite, which was standardized by RFC6287." https://www.grc.com/sqrl/other.htm https://www.grc.com/sqrl/other.htm