5 ms·
Misleading. Most sites would be foolish to use a 2 factor(like a fingerprint), but not a password.
by ggggtez 9y ago
Misleading. Most sites would be foolish to use a 2 factor(like a fingerprint), but not a password.
- imron 9y agoIndeed, especially when most computers and phones are literally covered in the target fingerprints.
- nodesocket 9y agoThe issue is not physical breaches by "dusting" fingerprint.
- ggggtez 9y agoThis comment was made before they changed the title. Previously it claimed you could log in without passwords, which is just plain wrong.
- emlun 9y agoIt depends on what the server chooses to support, but the spec is designed so that it will be possible to support login without a password. Instead the authenticator (e.g., phone or USB dongle) would locally ask for a PIN and/or fingerprint before unlocking the private key.