4 ms·

Actually the QR code is not even needed then. It's just browser-generated ids/keys.

• cm2187 9y ago
  But there is a strong argument for storing the private key on a different machine, particularly a disk-encrypted, app-whitelisted iphone, rather than on an open platform likely full of malware and telemetry like a mac or a pc. Then you need a way for your 2FA device to interact with the browser to do the login for you. A QR code is as good as another method.
  • falsedan 9y ago
    What about a smart card then?
    • cm2187 9y ago
      Even better except that now you have to carry it around everywhere.
• floatboth 9y ago
  The QR code just makes signing in with a different device possible. With SQRL, the QR code is supposed to be clickable for when you're browsing on your smartphone and want to sign in with the app that's on it.