4 ms·
I don't recall any popular website using Basic Auth. FF must implement WebAuthN or whatever was last offered to fix auth. Have i been pwned brings nothing new t
by homakov 8y ago
I don't recall any popular website using Basic Auth. FF must implement WebAuthN or whatever was last offered to fix auth. Have i been pwned brings nothing new to the table.
- Piskvorrr 8y agoWell, that's the problem with browsers though: they need to support a slightly broader range of sites than just the currently popular ones; long tail and whatnot. Now, I am all for actually secure auth, and support in browsers is the necessary first step; for "fixing auth", someone then needs to implement the other side of the equation, too (I do remember when OpenId+HW 2FA was supposed to have fixed this, a few years back). As for "nothing new" - for the people of HN, perhaps. For the casual user, this is something radically new.
- homakov 8y ago>I do remember when OpenId+HW 2FA was supposed to have fixed this HW 2fa can never fix auth because it's hardware, and cannot scale. There are solutions out there, all what's left is to raise awareness to add it. Showing popular passwords will just move us to a new set of popular passwords and so on.