3 ms·
Here’s a radical idea: don’t use passwords for logging in. Since the concept of privacy has been compromised everywhere, let’s just evolve to the next phase of
by bawana 5y ago
Here’s a radical idea: don’t use passwords for logging in. Since the concept of privacy has been compromised everywhere, let’s just evolve to the next phase of existence where it isn’t needed
- Crosseye_Jack 5y agoSuggestions on what that next phase should be? WebAuthn and U2F are great for us geeks, but can be a growing pain for the non-techies and they still need recovery methods incase you lose/damage your key. Built in password managers have helped but a lot of my non-techie friends think I'm weird for using a password manager. They still don't understand the fundamental risk that comes with password re-use, they believe that the sites they use the password on just won't be breached so there is no problem. The problem with built-in password managers is they can be used as another form of lock in. Try using icloud passwords on firefox for an example (granted they did release a chrome extenstion so windows users are not completely SOL). The issue (imo) is not only do we have to create a way to auth that us geeks can easily do, but also create a create a way that still allows your ave joe on the street to securely auth and not have a massive headache when they lose their device. Lets say we wire WebAuthn into all devices and browsers and every website starts using it, the keys are stored online so you can pick up a new device and import your keys and get on with life. How do you secure that inital key import? Chances are we are still going to need a password / passphase of some kinnd to secure that inital root of all knowledge.
- deleted 5y ago[deleted]