2 ms·
"Steve Gibson was saying recently in one of this latest Security Now podcasts that what FIDO is trying to do is inferior to his recently launched SQRL protocol"
by hamburglar 13y ago
"Steve Gibson was saying recently in one of this latest Security Now podcasts that what FIDO is trying to do is inferior to his recently launched SQRL protocol"
Of course he was. He's Steve Gibson. He's a shameless self-promoter and he loves to make over-dramatic claims of finding security flaws in things.
His only saving grace is that SQRL actually looks pretty sound to my moderately-better-than-amateur security experience. I hate to admit it, because if it catches on as a standard, he's only going to become more insufferable. The guy is a kook, except he's a kook who maybe have actually done his homework this time. I'd still like to hear what some actual security researchers have to say about SQRL, because I'm sure as hell not going to take his word on it.
- ay 13y ago+1 on all counts. I went to Wikipedia page and looks like it was written if not by him then by his fans - it does not contain a half decent description of the protocol. Just some propaganda-like fluff. I admit "squirrel" does sound cool. But how is it different from any other challenge-response algorithm escapes me.
- guard-of-terra 13y agoFor example it might become different from other algorithms because it will be working and solving users' problems instead of just existing in abstract algorithm-land?