3 ms·
but does it work for browsing on the phone itself? if so, slam dunk. even without that, it is what U2F was always destined to become. it's especially better t
by jiveturkey 8y ago
but does it work for browsing on the phone itself? if so, slam dunk.
even without that, it is what U2F was always destined to become.
it's especially better than u2fzero. ;)
- ecesena 8y ago> it's especially better than u2fzero. ;) genuinely curious: why? (disclaimer: I'm working on Solo, the successor of u2fzero)
- jiveturkey 8y agolook at my numerous comments in the 2 HN threads on solo/u2fzero.
- ecesena 8y agoYes, I'm aware of the general comments, I was trying to get to the core/specifics. For example, you mentioned multiple times that hardware breaks, can be stolen, the interfaces aren't standard. But all these things are actually true also for your phone: it breaks, it can be stolen (probably much easier than your keys), and chrome extension+push notification I wouldn't really call it more standard than USB. Again, I'm not trying to downplay Krypton, I like the phone solution a lot, I think it's much more usable than security keys. I use push notifications all the times e.g. via DUO. But I still think we need physical security keys against online attacks, for example as a mechanism to secure your phone itself.
- phillipseamore 8y agoLatest release notes for iOS app: Add support for logging into Google with Krypton locally on iOS (Google Advanced Protection program)
- agrinman 8y agoIt does for Google logins, see the blog post here: https://krypt.co/blog/posts/use-google-advanced-protection-with-krypton.html https://krypt.co/blog/posts/use-google-advanced-protection-w... Hopefully other sites support iOS based callbacks soon.