3 ms·
Because the current way sucks. 99% of the websites (I have accounts on) rely on my email for recovery and revocation. But my inbox is not an impenetrable fortr
by BoppreH 8y ago
Because the current way sucks.
99% of the websites (I have accounts on) rely on my email for recovery and revocation. But my inbox is not an impenetrable fortress, it's a communication channel; every device I own has access to it, and could be used as a backdoor to my entire digital life.
Then there's the risk of the third-party (Google banning me, being hacked, subpoena'd, etc), the privacy factor (see the Ashley Madison leaks), the often custom code implemented by each website...
- noja 8y ago> every device I own is has access to it and this sucks. Why can't I use my google account with my tablet without it automatically getting access to gmail sync?
- krupan 8y agoSo we can't improve the current situation at all until we solve all the problems?
- BoppreH 8y agoGood point. I think these specific problems were somewhat solved by other protocols, such as SQRL, but you are absolutely right, FIDO + email is much better than password + email.