4 ms·
> Well, the above scenario is not science fiction anymore. Proceeds to describe something that is not the above scenario. Secondly, this ignores the reality t
by jasonlotito 11y ago
> Well, the above scenario is not science fiction anymore.
Proceeds to describe something that is not the above scenario.
Secondly, this ignores the reality that phones in the hands of real users are not a reliable means of identification. People lose or change their phones all the time.
Next, this creates a massive road block for users in trying to sign up. As it stands now, unloq limits itself to a single email for a single user.
This also ties your authentication to a third party service. What assurances does unloq provide should they go the way of seemingly every other startup these days? What happens when Google buys them?
The "Passwords are obsolete" mantra is built around one assumption:
"Specifically, the ability to send an email or SMS to users reliably and quickly."
And the problem with that assumption is that it's wrong. Wrong, wrong, wrong. 100% wrong. Relying on a system like this will cause problems for your users, and it will be impossible to fix with software.
- mpatachi 11y agoThanks for the feedback. A few answers: "As it stands now, unloq limits itself to a single email for a single user." -> We do offer the option to create additional profiles on others email a user might have. "that phones in the hands of real users are not a reliable means of identification" -> We do agree that phones by themselves are not secure enough. Currently we do offer the option to add a secondary PIN on each profile, but we are thinking to enforce it to the application level.
- jasonlotito 11y ago> We do offer the option to create additional profiles on others email a user might have. I looked at the API, and it didn't offer that feature. > Currently we do offer the option to add a secondary PIN on each profile, but we are thinking to enforce it to the application level. So a password.