3 ms·
Even better, hardware authentication token + second factor is password. (something you have, something you know) See https://github.com/bitid/bitid/ https://gi
by ReverseCold 9y ago
Even better, hardware authentication token + second factor is password. (something you have, something you know)
See https://github.com/bitid/bitid/ https://github.com/bitid/bitid/
It would also probably be easier/(or at least not harder) for people than username and password. Just tell users to press the button and enter a password to sign in.
- jiveturkey 9y agoyes. this spec (u2f) makes the hardware part more feasible to implement without needing to enter an OTP. thus enabling 2fa very widely.
- emlun 9y agoIt also thwarts phishing and MitM attacks (assuming the browser is not evil), which OTPs do not.