4 ms·
It is, and has been since god knows when: client certificates. Better than passwords because they can't be phised, doesn't require an email, doesn't require tr
by tomjen3 10y ago
It is, and has been since god knows when: client certificates. Better than passwords because they can't be phised, doesn't require an email, doesn't require trusting any third-party service.
Unfortunately they are also very difficult to understand for even normal geeks and so basically no site use them.
- drdaeman 10y agoIt's not hard to understand ("you have the key, in a form of file or a hardware token, use it to open your account" is something average grandma can grok - no harder than passwords), but current UI and UX are terrible. Then it's chicken-and-egg problem: no one uses certificates because they're unuseable, and no one works on their usability because no one uses them.