4 ms·
I see, thank you. I suppose it also lets you reject keys from hardware platforms that are later determined to be insecure. The tinfoilhattery which I heard (a
by __MatrixMan__ 3y ago
I see, thank you. I suppose it also lets you reject keys from hardware platforms that are later determined to be insecure.
The tinfoilhattery which I heard (and regret tangentially supporting on occasion) was that it was a slippery slope towards something like SSO, where some company (1Password, say) is your identity provider. And then other companies might reject your identity because hypothetically 1Password only collects a retinal scan, not also DNA, or somesuch, and now we're in a race to the bottom re: just how authenticated one can be.
- juped 3y agoIt's hardly tinfoil hattery. If it isn't that (and I'm still not convinced by all the above that it isn't) then it needs to explain exactly how it isn't loudly, repeatedly, clearly, and very prominently.
- __MatrixMan__ 3y agoThe messaging around it sure has been heavy on the "you should do this it's better" and light on the "and here are the implications".