3 ms·
Persona and BrowserID still rely on passwords at some point. I believe the currently most realistic alternative to passwords is a time based authentication with
by jcfrei 14y ago
Persona and BrowserID still rely on passwords at some point. I believe the currently most realistic alternative to passwords is a time based authentication with a personal device (ie. a device you always keep with you, like your smartphone).
my online banking provider does this as well and has abandoned passwords altogether.
- AndrewDucker 14y agoWell, mine relies on password+Google Authenticator. The point being that no new password comes into being, and I don't have to worry about yet another site having a password I have to manage.
- mixedbit 14y agoWith Persona you don't need site specific passwords and you don't expose a password to sites that you are signing to. This is a huge advantage over popular one password per site model.
- koide 14y agoI'm divided. Smartphones will probably always be much less secure than specially designed one time password provider hardware. On the other hand your smartphone can get more secure with updates and your token provider will surely be much harder if at all possible to upgrade. Anyway the point is moot, if such a scheme is ever viable (as in most people will have one and you can implement it in many websites without having to be a bank) it will be through smartphones.
- maxerickson 14y agoI sort of think I want a dumb phone and tablet more than I want a smartphone. It would be nice if the tablet(or other nearby computers) could ask the dumb phone for authentication. Not a solution for everybody, but it would be nice if it were at least a possibility.