3 ms·

FIDO U2F is just enterprise stuff. My mom will never own one to log in to Facebook. So the market is very difficult for newcomers. That's why we see lots of low

by hasa 9y ago

FIDO U2F is just enterprise stuff. My mom will never own one to log in to Facebook. So the market is very difficult for newcomers. That's why we see lots of low quality products which come and go.

mtgx 9y ago
Maybe not Facebook, but if the government does it right, she'll use something like that in place of her SSN to be able to use social services, get credit, vote, etc.
- hultner 9y ago
  Sweden got a system a bit like this called BankID. BankID isn't operated by the government but rather by the system critical banks however it's really ubiquitous today and supported by most government sites, banks and other high security web systems. BankID comes both as hardware keys with smartcards or as a mobile application where you use a local key to sign a request.
  - hasa 9y ago
    Yes, biometric authentication is the future. And intelligent wearables or some other assets carried daily like mobile phones. USB dongles are just for techies and last season anyway.
    - ptman 9y ago
      what's biometric about bankid?
r3bl 9y ago
But she will enter the info from the SMS that Facebook sends to her? I mean, comparing U2F keys with the alternative 2FA methods (like SMS and Google Authenticator), it sure seems simpler to just tap the USB key instead of taking out your phone, unlocking it, seeing the message, and writing the code from the message. They're convenient as hell.
- hasa 9y ago
  You're right. 2FA is convenient as hell until biometric authentication will do it with user's consent ( just tap something ). Yubico is quite near this target, but fragile usb dongle hanging from the side of your laptop isn't still optimal. FIDO is doing great work trying to bring secure authentication on the market, but the risk is that it'll be another complex OpenID which is killed by the giants ( Google, M$ etc ).
  - r3bl 9y ago
    > but fragile usb dongle hanging from the side of your laptop isn't still optimal. And that's why we have Yubikey Nano versions. And as for them being fragile, I really don't experience that. Mine one has been sitting on my keychain for about a year and a half and it seems rock-solid. Even though it has been through rains and thrown around countless times, it still works like it did on the day one. Even though it's plastic, it is pretty durable from my perspective.

by hasa 9y ago

FIDO U2F is just enterprise stuff. My mom will never own one to log in to Facebook. So the market is very difficult for newcomers. That's why we see lots of low quality products which come and go.

mtgx 9y ago

Maybe not Facebook, but if the government does it right, she'll use something like that in place of her SSN to be able to use social services, get credit, vote, etc.

hultner 9y ago
Sweden got a system a bit like this called BankID. BankID isn't operated by the government but rather by the system critical banks however it's really ubiquitous today and supported by most government sites, banks and other high security web systems. BankID comes both as hardware keys with smartcards or as a mobile application where you use a local key to sign a request.
- hasa 9y ago
  Yes, biometric authentication is the future. And intelligent wearables or some other assets carried daily like mobile phones. USB dongles are just for techies and last season anyway.
  - ptman 9y ago
    what's biometric about bankid?

r3bl 9y ago

But she will enter the info from the SMS that Facebook sends to her? I mean, comparing U2F keys with the alternative 2FA methods (like SMS and Google Authenticator), it sure seems simpler to just tap the USB key instead of taking out your phone, unlocking it, seeing the message, and writing the code from the message. They're convenient as hell.

hasa 9y ago
You're right. 2FA is convenient as hell until biometric authentication will do it with user's consent ( just tap something ). Yubico is quite near this target, but fragile usb dongle hanging from the side of your laptop isn't still optimal. FIDO is doing great work trying to bring secure authentication on the market, but the risk is that it'll be another complex OpenID which is killed by the giants ( Google, M$ etc ).
- r3bl 9y ago
  > but fragile usb dongle hanging from the side of your laptop isn't still optimal. And that's why we have Yubikey Nano versions. And as for them being fragile, I really don't experience that. Mine one has been sitting on my keychain for about a year and a half and it seems rock-solid. Even though it has been through rains and thrown around countless times, it still works like it did on the day one. Even though it's plastic, it is pretty durable from my perspective.