3 ms·
this article describes a centralised system with the fido2 key manufacturer as the source of truth
by zemnmez 6y ago
this article describes a centralised system with the fido2 key manufacturer as the source of truth
- dandanua 6y agoThe hardware isn't supposed to connect to manufacturer servers, so how manufacturer is going to make decisions?
- zemnmez 6y agothe fundamental assumption of the system as stated in the article is that the device manufacturer will simply never attempt to forge keys
- dandanua 6y agoIt has no incentives to do that. Device keys are second-factor keys. The user has its own, personal (software) keys. You need both to make a transaction.
- cortesoft 6y agoThe idea is that the device manufacturer would create a user, get a bit of the currency, and then spend it repeatedly.
- mikeiz404 6y agoAnd that the private keys of the manufacturers will never be stolen or discovered.
- a1369209993 6y agoThe manufacturer can deny service to undesirables[0], by refusing to provide them with fido2s (either initial or replacement when broken). If we're willing to accept targeted denial of service we might as well have the New York Times (or whoever) publish hashes and timechain-encrypted transactions for tick N alongside decrypted transactions for tick N-1; that requires less secrity and infrastructure from the central authority. 0: I could give a long list of historical examples demonstrating that is in fact a problem, but frankly, if you (think you) are not a member of any demographic that someone considers undesirables, then I consider you a undesirable.