7 ms·
Ha. Perfect. That is exactly what I was imagining. Apologies for the long conversation. Do you have any idea why this is not popular? Is it too hard to impleme
by inapis 7y ago
Ha. Perfect. That is exactly what I was imagining. Apologies for the long conversation.
Do you have any idea why this is not popular? Is it too hard to implement or is it just that business's do not see security as something to invest a lot in?
- Godel_unicode 7y agoMost major SaaS apps support it, the major hardware provider I see recommended is yubikey although Google makes one as well. See also U2f. It's super easy to implement, try it out for yourself in Flask. https://www.yubico.com/solutions/fido-u2f/ https://www.yubico.com/solutions/fido-u2f/ https://cloud.google.com/titan-security-key/ https://cloud.google.com/titan-security-key/ https://github.com/herrjemand/flask-fido-u2f https://github.com/herrjemand/flask-fido-u2f
- Rafert 7y agoU2F is the legacy protocol, you should refer people to it's successor WebAuthn (and the FIDO2 hardware): https://webauthn.guide/ https://webauthn.guide/ for an intro https://www.w3.org/TR/webauthn/ https://www.w3.org/TR/webauthn/ for the JS API