4 ms·
It's 1 step. Just scan a code. Con: requires internet connectivity, unlike some 2-factor implementations
by veesahni 13y ago
It's 1 step. Just scan a code.
Con: requires internet connectivity, unlike some 2-factor implementations
- lstamour 13y agoBeyond that there's no explicit second-factor here, if you don't have Internet, what are you proving your identity to? If local, then run a local server...
- gbhn 13y ago2-factor can be done in the post-password sense (require the second factor after this SQRL step), or alternatively, the algorithm the phone does could use a second factor at that point.
- eximius 13y agoWell, theoretically you could make an implementation which reads the QR code then displays what would have been posted to the server. Via a web-browser extension, you could then type this into a form field and have that log you in. You could base<something> encode it to make it a little easier. So, it seems feasible offline with online required only for convenience.
- jonny_eh 13y agoIsn't access to the internet already required to log into any internet site?
- imrehg 13y agoMeaning Internet access for your phone. The example in the article being login at the library - the library computer has Internet access, but your phone has to also connect to a wifi (if there is one), or the mobile network (if you are 3G subscriber and there's reception). Then factor in that you might go abroad, I don't know many places where they just give free internet access to anyone with a smartphone...