3 ms·
I am a big fan of that. The only problem I can see is that often the device receiving the email is not the one performing the authentication (i.e. I am on my de
by mejutoco 4y ago
I am a big fan of that. The only problem I can see is that often the device receiving the email is not the one performing the authentication (i.e. I am on my desktop and I open the email on my phone).
If instead of a link there is a code to enter IMO (or maybe both) this system is very good.
- voxic11 4y agoOr as an alternative to manually copied codes you can include a QR code.
- klabb3 4y agoYes but QR relies on camera which often isn't available on desktop. A common use case would be sign in on desktop, check email on phone. The code needs to be brought back to the desktop.
- Fire-Dragon-DoL 4y agoCould you have the qr code being scanned from the phone and the act of accessing the url on the phone is what allows the desktop to login? What would be the downsides of this approach?
- klabb3 4y agoGood point. Thanks! Code is good but needs lower adaptive entropy (nobody wants to write a sha256 by hand).