3 ms·
Almost there; now we just need some cross-platform implementations with synced credentials, and support from a couple major sites. Ideally some password manager
by Ajedi32 8y ago
Almost there; now we just need some cross-platform implementations with synced credentials, and support from a couple major sites. Ideally some password managers will step in and implement support, and Google will add support to their own login flow as a primary authentication factor.
- edraferi 8y agoAgree. Credential syncing is important. Use case: I create an account using using a Yubikey on my desktop, then want to access that account from my mobile phone using a fingerprint. How does the website know I'm the same person? Keybase has a nifty personal web-of-trust for this stuff, but (A) that ties you to a single strong identity and (B) you can't really use that identity outside of their services.
- StavrosK 8y agoRealistically, that's what will happen. Your password manager will add WebAuthn support, you'll get a "Do you want to log in to this site? y/n" popup instead of a login box, and you'll click "yes" and be logged in. Eventually, instead of your password manager having a billion passwords, one per site, it'll just consist of one cryptographic key.