5 ms·

I would love to know this as well. The rise of 2FA has made everything more secure for sure, but it has made usability plummet like a rock on Jupiter. Especiall

by seer 7y ago

I would love to know this as well. The rise of 2FA has made everything more secure for sure, but it has made usability plummet like a rock on Jupiter. Especially in a corporate environment where you have multiple layers of tokens, authenticators and passwords. Password managers do help, but you still need to click and enter and copy paste many many times a day. If only someone like apple / microsoft / google came up with a comprehensive solution to all this - as they seem to be the only entities big enough to shoulder such a monumental task. I mean Apple sorta kinda does, but only for its own services. I have an apple watch, it knows that its me and its authenticated. The proximity with my laptop unlocks it automatically - so far so good, but why can’t I use the same thing for github/google/microsoft websites? Why can’t safari send some sort of token through to then authenticating that its me? I mean if you’re afraid it might be someone else at the computer - _check the damn watch proximity again_! And if there’s a need for personas - sure but they are all still linked to me. I would imagine there could be like a system dialog where I choose which persona to send to a specific site/app. /rant

briffle 7y ago
I can't imagine 2FA on something like a ship at sea, that may or may not have a working uplink to high latency satellite internet, and probably not SMS that many 2FA providers use.
- rkangel 7y ago
  Which is why your second factor would be a physical key, authenticated locally. 2FA doesn't have to require internet access, it just needs two factors!
- yjftsjthsd-h 7y ago
  TOTP and U2F should both work fine with no network connectivity.
bena 7y ago
Security and access aren't separate concerns. They are opposite sides of the spectrum. Security reduces access. That is what it is designed to do. Anything that makes a system more accessible makes it less secure.

by seer 7y ago

briffle 7y ago

I can't imagine 2FA on something like a ship at sea, that may or may not have a working uplink to high latency satellite internet, and probably not SMS that many 2FA providers use.

rkangel 7y ago
Which is why your second factor would be a physical key, authenticated locally. 2FA doesn't have to require internet access, it just needs two factors!
yjftsjthsd-h 7y ago
TOTP and U2F should both work fine with no network connectivity.

bena 7y ago

Security and access aren't separate concerns. They are opposite sides of the spectrum. Security reduces access. That is what it is designed to do. Anything that makes a system more accessible makes it less secure.