News for hackers. Stuff that matters.

A comment on NIST declares the age of SMS-based 2-factor authentication over. Parent comment

Re:NIST declares the age of SMS-based 2-factor authenticatio... by Natanael_L on Tuesday July 26, 2016 @07:37AM (#12164859)
I want ubiquitous support for U2F / UAF, which would probably be the easiest solution.
[ Parent | on HN ]
Re:NIST declares the age of SMS-based 2-factor authenticatio... by Rafert on Tuesday July 26, 2016 @08:10AM (#12165002)
That will probably in the form of Web Authentication API (https://w3c.github.io/webauthn/) which started out as version 2.0 of the FIDO specifications.

Microsoft will release prefixed support of the draft spec in Edge in the upcoming Windows 10 Anniversary update on August 2: https://blogs.windows.com/msedgedev/2016/04/12/a-world-witho...

[ Parent | on HN ]
Re:NIST declares the age of SMS-based 2-factor authenticatio... by Osiris on Tuesday July 26, 2016 @02:36PM (#12167815)
How would that work with multiple devices? If the private key is stored in a TPM on the machine you used to register, then you can only ever use that device, or you have to go through some process to add additional devices.
[ Parent | on HN ]