szasamasa

11 ms·

91.
by szasamasa 3y ago
so your concrete suggestion?
92.
by szasamasa 3y ago
no button is authenticated you start a process by pressing the button and authenticate via having the device and using your os account biometrics/passcode then your pass manager signs a challenge with the passkey proving that you come
93.
by szasamasa 3y ago
good point pass manager is needed and that is one of the key differences it is good but also a challenge for some people, especially if the 3 bigs cannot sync because normal people without pass manager begin to use Apple, Google, Microsoft
94.
by szasamasa 3y ago
I read this all the time, ist it true? isnt public key a bad wording suggesting it should or can be public? I would call it verification key and keep it secret on the server only thing it need not to be hashed, it is already "hashed&qu
95.
by szasamasa 3y ago
you either can remember all your passwords and then you are fucked or you use a pass manager passkeys will be stored in a pass manager and they can be recovered with device pin and master pass, I think they will be exportable too so yes, yo
96.
by szasamasa 3y ago
if you implement passkeys, who generates the key pair? browser, os, pass manager? if the pass manager stores and manages private keys, it should create the keys
97.
by szasamasa 3y ago
user blaming has oftentimes some truth in it :) i can really not imagine those fuckups you always write about with google somewhat irritating... is it true, is it not, are you google hater bot, are you not? :D the 2fa codes are backed up in
98.
by szasamasa 3y ago
you are then right sorry I could not imagine such a fuckup :)
99.
by szasamasa 3y ago
vow :) thumbs up!
100.
by szasamasa 3y ago
I was under no impression whatsoever. I said if you hate google you have alternatives. Google bashing is lame. I am sure if you have a 10 dollar phone logged in to your google account at home, offline, you never lose your 2fa codes. But hey
101.
by szasamasa 3y ago
thanks sounds cool
102.
by szasamasa 3y ago
I do not have proton so i am curious: - why do someone need a "windows" app if there is a web app, it could be a pwa that works everywhere (like teams, outlook) is it true it does not work on linux? if you have a web app it hould
103.
by szasamasa 3y ago
you sound like an angry fastmail employee :) you seem to have very special needs, why didnt you check out / test if what you want works before "migrating"? it takes a lot of work to create services it is cool if you are criti
104.
by szasamasa 3y ago
I believe they would be then forced to open up, not just fines. Free pass management is really a basic human right (or democracies can make them to be). I personally do not hate Apple, Google, Microsoft but they own 99% of OS I guess so if
105.
by szasamasa 3y ago
then use microsoft authenticator or bitwarden
106.
by szasamasa 3y ago
search in apps with name: authenticator
107.
by szasamasa 3y ago
it is now can be synced and backed up in your google account which you can tie to your real identity with your phone number and telecom company where you can have a contract... in addition, you can have a 10$ android phone that barely moves
108.
by szasamasa 3y ago
so it is not a 2nd factor any more since with your master pass anybody can get any passwords and the totp codes
109.
by szasamasa 3y ago
Why would Apple, Google, Microsoft CEO want to go to congressional hearings and put a big stain on themselves for 2% market share? I think they just want to get rid of passwords because there are good people working there too and it is a pa