4 ms·
What needs to be removed is the password system entirely. I cannot believe that in the age of public-key cryptography we are still using passwords for serious
by enriquto 7y ago
What needs to be removed is the password system entirely. I cannot believe that in the age of public-key cryptography we are still using passwords for serious security.
- martin-adams 7y agoI find Face ID such a pleasure to use where it auto-fills my password, and since the passwords are auto-generated they are like some type of key. I do agree that passwords will be removed, or at least rennogated to unlocking your login assistant.
- nottorp 7y agoPasswords can be entered from any device, while getting your private keys on something you need to use in a hurry can even be impossible... It's the old dilemma of machine-only protocols vs protocols that can be spoken by a human typing on a keyboard.
- astazangasta 7y agoHow often are you using a new device you need to enter your password in that you can't plug a Yubikey into?
- magissima 7y agoMore often than never!
- nottorp 7y agoI don't know, when I'm borrowing a trusted friend's phone for example? Say, can you tell me what the recovery process is if your Yubikey croaks while you're on a trip away from home? Every option has drawbacks.
- astazangasta 7y agoI haven't ever done this, not even with my wife's phone, so I'd consider this an obscure case. As for the yubikey croaking, easy: carry a backup.