4 ms·

Why does this need an app? Looks like it would work just as well with a browser extension reading the QR code.

• arnoooooo 9y ago
  Actually the QR code is not even needed then. It's just browser-generated ids/keys.
  • cm2187 9y ago
    But there is a strong argument for storing the private key on a different machine, particularly a disk-encrypted, app-whitelisted iphone, rather than on an open platform likely full of malware and telemetry like a mac or a pc. Then you need a way for your 2FA device to interact with the browser to do the login for you. A QR code is as good as another method.
    • falsedan 9y ago
      What about a smart card then?
      • cm2187 9y ago
        Even better except that now you have to carry it around everywhere.
  • floatboth 9y ago
    The QR code just makes signing in with a different device possible. With SQRL, the QR code is supposed to be clickable for when you're browsing on your smartphone and want to sign in with the app that's on it.
• borplk 9y ago
  It's not that simple. It needs an app to store/manage your identity. It is however a protocol so it's possible to have many different clients for it.
  • falsedan 9y ago
    Same question but now the browser is using local storage?
    • borplk 9y ago
      Can you clarify what you mean?
• wscott 9y ago
  It can work that way and is described right below the xkcd comic. He does it with a separate process running on the local machine and the javascript uses a localhost connection to talk with it.