4 ms·
> Google Authenticator and FreeOTP work even without network connectivity, so no phone plan is needed. You still need a trusted, personal device to use those a
by tantalor 5y ago
> Google Authenticator and FreeOTP work even without network connectivity, so no phone plan is needed.
You still need a trusted, personal device to use those apps.
What if you don't have a personal device at all, how do you check your e-mail at a library?
- ev1 5y agoI am all for taxpayer funded "everyone gets a WebAuthn token or two to put on keychain" and requiring banks and tax authorities use it. No SMS, ever.
- tantalor 5y agoPeople in USA would literally riot if required to carry around a government issued dongle.
- ev1 5y agoMeanwhile they carry around literal spyware with FB, IG, Twitter, Alexa, Google Assistant, etc 24/7 and can't bear to be away from it for five minutes voluntarily.
- Epitom3 5y agoYou still have to carry something right? How is that different from carrying your phone?
- ev1 5y agoIt's on a/your keychain, wallet, or backpack, where phones are difficult to fit. It doesn't need wifi, recharging, or a battery or mobile plan. Anywhere you need to use it will have some way to connect it, like checking your email in public, tapping it against a phone to log in, etc. It's orders of magnitude cheaper than a phone and you can have numerous backup keys in safe places if needed. If stolen, has little to no resale value and zero personal information on it, and you can unregister the key from online services
- vestrigi 5y agoIt‘s quite hard to provide a second factor if you can‘t have any belongings because you either lose them or they get stolen (eg. homeless people battling addiction). Personal devices and yubikeys are ruled out. Biometric features could be another factor, although hard to implement. At a library, a staff member could create authenticator codes for people who often visit and are recognized by the staff. The visitor would then request to see the code if they need it. Of course this is a lot of effort for the library to identify people and the visitors must rely on their local library, they still can’t access their e-mail if they are on a device somewhere else.
- tantalor 5y agoReally like this idea! Could you solve the identity problem with a real key, like for a safe deposit box, but unlocks a 2fa key?
- vestrigi 5y agoI like your idea as well! In theory it could be solved, but that introduces new challenges, a 2fa key usually lasts for 30s and you have to be fast enough to enter it. For the start a staff person running around to peoples desks with a mobile device that has the codes registered could be more practical. The boxes will still only work for people that are able to reliably keep possessions to themselves.