I've been waiting +25 years for this. But I don't want my phone to serve as my "root" authority. I'd rather have a separate pair of fobs used to seed all my ot

I've been waiting +25 years for this. But I don't want my phone to serve as my "root" authority. I'd rather have a separate pair of fobs used to seed all my other devices. Then put one of those fobs somewhere safe. When the USA finally gets smart and implements postal banking, I'd love for the USPS to offer safe boxes. Maybe even other fob related services. Kinda like a notary public, but for credentials. -- Late 90s, shortly after W3C's P3 failed to catch on, a buddy and me cobbled together a SSO POC for browsers. Our catchy name was "Credendity", a failed portnameau evoking credentials and identity. One of our core motivators was "faceted identity", negotiated per account, to only share partial PII, to thwart data aggregators. So naive; big data deanon always wins. Our POC was just turrible. Embarrassing. Ditto every SSO implementations I've used since, whether standards-based, vendor, or bespoke. In hindsight, it's too bad our sense of integrity and esthetics prompted us to abandon our effort.