3 ms·
Why not simply allow users to specify any public ssh key as an authentication factor? And create a UI around that? Why do we need to create more and more new se
by aktuel 3y ago
Why not simply allow users to specify any public ssh key as an authentication factor? And create a UI around that? Why do we need to create more and more new security crap that no sane person understands?
- FrozenSynapse 3y agoAnd how many sane persons will understand what a public ssh key is?
- aktuel 3y agoThat's what the UI is for.
- aktuel 3y agoI admit sane is a relative term. All I care about is that the keys are ssh keys and the protocol is ssh auth. Then do with that what you will. Store the keys in the cloud if you must. When a user creates an account on a site the browser gives the user a choice to either select an existing identity or create a new one. All very straight forward. You don't have to mention anything about ssh, RSA or ssh. Nobody is forced to learn what ssh means or how it works.