3 ms·
> Your average user is more concerned about losing their password than they are about authenticator sovereignty Right up to the point when they’re locked out f
by signal11 4y ago
> Your average user is more concerned about losing their password than they are about authenticator sovereignty
Right up to the point when they’re locked out from their Google, iCloud or Facebook accounts with little recourse or appeal. And then they discover it’s not just Google, a whole host of other services don’t work.
And it does happen, and I for one don’t want to wait for legislation to mitigate this blatant attempt at yet more centralisation.
Better to not centralise in the first place.
- zozbot234 4y agoMany authenticator apps allow you to extract and back up the private key yourself, with no involvement of any 3rd party. But it's a totally optional workflow and you're never asked for that private key while authenticating, so the mass phishing and spear-phishing attacks seen with passwords are still infeasible.