3 ms·
What we need is just a secondary password with limited permissions and some fraud guarantees. There's no reason your bank account can't also act as a payments g
by hackinthebochs 10y ago
What we need is just a secondary password with limited permissions and some fraud guarantees. There's no reason your bank account can't also act as a payments gateway with the right protections.
- wmf 10y agoWe could call it... a credit card number.
- ctpide 10y agoYes, because that never got stolen in the past
- wmf 10y agoAny password that you give out will be stolen; that's why "let's have a special secondary password" doesn't solve much. There are now passwordless ways to authenticate, authorize, prove identity, make payments, etc. so that's what we should be suggesting.
- ctpide 10y agoApple Pay is technically trying to solve this problem by providing one-time authentication keys for a specific transaction at time of payment. This sort of key can not be reused in another transaction... What exactly do you mean with other passwordless ways?
- wmf 10y agoBasically OAuth, which allows you to prove to one site (e.g. a merchant) that you have an account at another site (e.g. a bank in this case). http://designingsocialinterfaces.com/patterns/The_Password_Anti-Pattern http://designingsocialinterfaces.com/patterns/The_Password_A...