3 ms·
Amidst all of these pwnings, we still don't have a standard way to update our passwords from our password managers automatically.
by gausswho 1y ago
Amidst all of these pwnings, we still don't have a standard way to update our passwords from our password managers automatically.
- throawayonthe 1y agoif we could have standardization like that, we wouldn't need passwords
- phoronixrly 1y agoWe also wouldn't be having an issue with password leaks as I expect it would be simpler to move on to passkeys (or something else) than implementing a standard way of password rotation...
- XorNot 1y agoExcept passkeys are an opaque, awful solution. They're hard to explain to users, the implementations want to lock people to specific devices and phones, you can't tell someone a passkey nor type it in easily over a serial link or between two devices which don't have electronic connectivity.
- phoronixrly 1y ago[flagged]
- NetMageSCW 1y agoWith the right apps, passkeys can be synced across devices (e.g. iCloud Keychain or 1Password).
- bl4ck1e 1y agoIf there was a standard, do you know how long it would take to get adopted across the interwebs.
- DANmode 1y ago10 years.
- goalieca 1y agoI feel like we missed the chance to have a standard http resource for this stuff.
- berkes 1y agoyes! It's a shame, IMO, that the Basic Auth never got updated or superceded by something with a better UX and with modern security.
- mbesto 1y agoPasskeys essentially solve this, however they are not backwards compatible. If they were backwards compatible (e.g. an automated way to change passwords) then you might as well just enable Passkey as a replacement. Thats the conundrum.
- deleted 1y ago[deleted]