4 ms·
Although i have heard of SQRL [1] which purports to be a frictionless way of securely logging in with public private key encryption. I've never seen it discusse
by wholinator2 3y ago
Although i have heard of SQRL [1] which purports to be a frictionless way of securely logging in with public private key encryption. I've never seen it discussed here though so I'm unsure if there's significant downside
[1]: https://www.grc.com/sqrl/sqrl.htm https://www.grc.com/sqrl/sqrl.htm
- Retr0id 3y agoThis sounds a lot like passkeys https://developers.google.com/identity/passkeys https://developers.google.com/identity/passkeys - I'd be interested to see a more thorough comparison of the two. Both of these do a challenge-response style authentication with a particular website, and wouldn't really work as part of a decentralized system. You could use the same signing key ordinarily used to sign authentication challenges to sign nostr notes, but then you're back to square 1 really. Edit: slightly better passkey info here https://developers.yubico.com/Passkeys/How_passkeys_work.html https://developers.yubico.com/Passkeys/How_passkeys_work.htm...
- Ajedi32 3y agoSQRL is indeed pretty similar to passkeys. It was just invented before passkeys (before WebAuthn even) and designed to work without requiring any new web standards or changes to the existing web browsers at the time. That greater compatibility came with some UX trade-offs though. Now that passkeys exist and are widely supported by web browsers there's really no need for SQRL anymore; passkeys are a far more polished version of the same concept.