3 ms·
Theres no asymmetric crypto here. The QR codes share the same secret. https://github.com/ksze/PeerAuth/blob/main/index.html#L240 https://github.com/ksze/PeerAu
by 8organicbits 2y ago
Theres no asymmetric crypto here. The QR codes share the same secret.
https://github.com/ksze/PeerAuth/blob/main/index.html#L240 https://github.com/ksze/PeerAuth/blob/main/index.html#L240
The big win IMO is that lots of people already have TOTP apps on their phone, so there's nothing extra to install.
- XorNot 2y agoThis seems like a weird problem to solve compared to getting people to do this at all. In an age of front facing smart phone cameras I'm at a total loss why no one implements a simple "aim phones and exchange QR codes protocol" for almost everything.
- 8organicbits 2y agoThe post is about a simple web page that generates a shared secret which you then aim phones at to collect the QR codes. You could write an app for the same thing, but then you'll need to install (and trust!) a new piece of software.