3 ms·
With a password, I can log in to the website from anywhere. With client-certs, I have to pre-populate the cert onto all of my devices.
by quanticle 10y ago
With a password, I can log in to the website from anywhere. With client-certs, I have to pre-populate the cert onto all of my devices.
- oneeyedpigeon 10y agoHaven't you just described 2FA?
- manojlds 10y agoSo why not just current 2FA instead of certs?
- pluma 10y agoWith 2FA I have my password and pull out my phone to look up a code. So I still only need to populate one device.
- quanticle 10y agoNo, with 2FA, I need my password, and my phone. I only have to set up one device: my phone (or whatever other 2FA token). I don't have to go through my home computer, my laptop, my phone, my work computer, my friend's computer, etc. and set up my certificate everywhere just because I might need to log in to a website.
- matt4077 10y agoDoes the Apple keychain handle certificates? Because I thought we'd all moved on from remembering two or three passwords to letting software manage and synchronize those. It's been working flawlessly for a couple years now. Although at that point, a long, unique password seems to be about the same as a certificate.
- pilsetnieks 10y agoAnywhere also means from any device, not just ones you own and have set up with your iCloud account. Mind you, I'm not saying that it's a good idea, logging into anything from anywhere willy nilly.
- matt4077 10y agoTrue – I can look up passwords on my phone. But copying a certificate may be slightly more annoying.
- andy_ppp 10y agoEveryone could have their own certificate authority on their person in a small usb device. You could even generate one time login creds if you were on a public machine.
- vonmoltke 10y agoWhich is great as long as every machine you log in from permits USB devices.
- corobo 10y agoand is positioned in a way that frequent use of the USB ports was convenient. I'm thinking of 2 places I visit frequently where the computers are hidden under a big ol' desk
- greendragon 10y agoAnd as long as you don't lose the USB drive, or sit on it wrongly, or otherwise make it unusable. The best and most durable solution is really some RFID tags embedded in your wrists and forehead.