True. And I don't want to be overly pedantic with the implementation details. I like your proposal to remove passwords and prevent phising in general and I'm

True. And I don't want to be overly pedantic with the implementation details. I like your proposal to remove passwords and prevent phising in general and I'm trying to give some honest feedback on what I think is wrong with this auth system. The title of this post is "Tell me why this auth system is a bad idea", after all, not "Tell me the good parts of this auth system" ;) I guess a question I would have for you is: name a few companies to which you would like to pitch this auth system. (e.g. your first few customers if you turned this into a startup or something)