4 ms·
Mostly because you need the "I". Unless you start accumulating PKs as we do passwords. Some sites will require access revocation, others not. Some require known
by Spearchucker 14y ago
Mostly because you need the "I". Unless you start accumulating PKs as we do passwords. Some sites will require access revocation, others not. Some require known identities, others not. Unless an identity system is ubiquitous it won't gain widespread adotpion. For it to be adopted it needs to address every scenario that an identity meta system faces.
- count 14y agoWhy can't I just use the same PK everywhere? The whole point is it's not reversible to the Private key. Nothing else about how passwords are handled would have to change.
- qu4z-2 14y agoPublic key auth works pretty okay for ssh with a single keypair. I don't see why it wouldn't work for websites too. (As count also mentions) the entire point is that you can prove your identity without giving the entity you're proving to the ability to do the same.