4 ms·
Saas Pass has had a passwordless authentication solution available on the market for almost a decade. The future has arrived. It is just not evenly distributed
by 1cvmask 5y ago
Saas Pass has had a passwordless authentication solution available on the market for almost a decade. The future has arrived. It is just not evenly distributed yet.
-
Disclaimer: Worked on UI and UX stuff
- antisthenes 5y agoHow does it work?
- 1cvmask 5y agoYou can scan an ecrypted barcode or through push login or other methods. There is more at the developer site.
- TheMatten 5y agoIs this basically what Discord does with it's web/desktop client?
- tialaramex 5y agoNote that push login is vulnerable to one of the phishing attacks described. User goes to fakebank.example, attacker goes to realbank.example, user types in their username, it is pasted by attacker, the user gets a push login request, "Hey are you trying to log into Real Bank?". Yes, says the user, of course I am, and they let the attacker into their account. WebAuthn fixes this, by having the web browser take responsibility for the thing humans are bad at. Is this, in fact, realbank.example? No, it's fakebank.example. Attack failed.