3 ms·
I agree with the general sentiment but every non-quantum "thing you have" can be duplicated. PS: I suspect that you could make a 2FA protocol capable of detect
by afiori 3y ago
I agree with the general sentiment but every non-quantum "thing you have" can be duplicated.
PS: I suspect that you could make a 2FA protocol capable of detecting duplication of the thing you have by having the app generate signed codes like "this is the n-th code I have generated" and have the server remember the n as a logical clock to detect duplicates and "time travel".
AFAIK only bank-type apps would use something this sophisticated
- charcircuit 3y ago>but every non-quantum "thing you have" can be duplicated. Not easily. Extracting keys from hardware keys is very hard to do.
- afiori 3y agoI agree, what I was trying to say is that not offering a key export is an attempt to gain some of the type of security provided by hardware keys: Difficulty to access the secret