News for hackers. Stuff that matters.
Re:Cierge – passwordless authentication by Tomte on Friday January 12, 2018 @07:44AM (#16132394)
This is basically (but quite a bit more powerful) than the auth system that The Magazine used back then (enter mail address, get a link, click and have cookies set). I loved that and wish more sites would do something like that.

And from the view point of a site owner it's even better: you don't handle passwords anymore. Passwords that many users share among several sites. So you won't be responsible for really, really keeping them secure. Because you don't have them.

Additionally, mail providers and browser vendors have much more security knowledge than pretty much everyone offering a web service.

Re:Cierge – passwordless authentication by dozzie on Friday January 12, 2018 @08:45AM (#16132720)
I hate this workflow. I need to copy-paste the URL from terminal to browser. Even if I used a webmail, I would need to constantly go there and search for a new mail every time I'm logging in instead of having the login form filled on my request.
Re:Cierge – passwordless authentication by Tomte on Friday January 12, 2018 @09:17AM (#16132922)
You are doing this once per device, every n days, with n typically at least 90, possibly more. Your login form consists of a single field for your mail address which is autocompleted. I really do not see your point.
Re:Cierge – passwordless authentication by dozzie on Friday January 12, 2018 @10:31AM (#16133604)
> You are doing this once per device, every n days

...with n being 2, and sometimes even 0.3. There are few services where I would want to stay logged in.