4 ms·
Seriously. Just stop. Strong hashing service-side and strong random password generation client side (coupled with usable password management) is a solution tha
by stephenr 10y ago
Seriously. Just stop.
Strong hashing service-side and strong random password generation client side (coupled with usable password management) is a solution that works literally right now.
Its also very easy to explain technically, and reasonably easy for security researchers to verify claims (ie hashing algorithms, source of random passwords, password manager storage method, etc)
This will almost certainly be covered by patents, and honestly how can anyone possibly analyse the security of this method without inherently trusting what the authors say or becoming an expert in the field themselves.
This also sounds like too many failure modes. Hurt your leg? Sorry no email for you this week. Got a blister and can't type the same? Sorry no logging into your banking site.
What happens about people who can't walk and/or don't type directly?
If the effort going into these ridiculous efforts went into giving more users access to a decent password manager the problem would be solved in no time.