4 ms·
This is a bit like saying "human-driven cars shouldn't exist: the roads would be much safer". True, certainly. You're unlikely to get much debate about hardwar
by akerl_ 9y ago
This is a bit like saying "human-driven cars shouldn't exist: the roads would be much safer".
True, certainly. You're unlikely to get much debate about hardware tokens / certificates / etc being more securable; the reason we still have passwords isn't because they're more securable, it's because their UX for the vast majority of users is much better.
If you're suggesting there's a reasonable path to get from $the_world_today to $the_world_you're_proposing, I suspect that's a more interesting point to make.
- always_good 9y agoI looked into Yubikey but it seems absolutely impractical for day-to-day authentication unless you only use it for a finite amount of sites. For example, you'd want at least one backup. Maybe buried somewhere or in a safe deposit box. But the workflow for keeping it synced would be hilarious. Ever since then, I can't take anyone seriously on HN who says "we shouldn't have passwords, just hardware key fobs". Not to mention your authentication security doesn't matter when there's a customer support line an attacker can socially engineer.