3 ms·
At that point we'd be better of figuring out a proper protocol that allows websites to talk to the password manager directly.
by contravariant 5y ago
At that point we'd be better of figuring out a proper protocol that allows websites to talk to the password manager directly.
- cpeterso 5y agoMozilla designed a decentralized authentication protocol back in 2011 called BrowserID, which was later standardized by the IETF. IIUC, it was similar to OpenID but sites would authenticate your identity with your email service provider. Unfortunately, the protocol never gained traction. https://en.wikipedia.org/wiki/Mozilla_Persona https://en.wikipedia.org/wiki/Mozilla_Persona
- X-Istence 5y agoSomething like OpenID connect?
- contravariant 5y agoWell, ideally without the centralized server in between.
- ziml77 5y agoDon't we already have that with WebAuthn? It should be possible for the authentication request to be directed to the password manager. Less secure than using a hardware key, but more secure than password, email, or text message authentication.
- contravariant 5y agoThat looks like it could work, though I don't think it has a lot of support from either password managers or websites.