Re:Why don't we expire passwords on the web?
by nodata on Monday December 13, 2010 @10:56AM
(#2000803)
If we're going to do away with passwords, let's at least do it properly with smartcards.
[ Parent
| on HN ]
Re:Why don't we expire passwords on the web?
by arethuza on Monday December 13, 2010 @11:25AM
(#2000933)
I've worked with systems that used USB tokens with X509 certificates for authentication and the tokens still required a password (as with Chip-n-Pin cards).
The "something you have" only really works as an additional authentication factor to the "something you know" of the passwords.
Re:Why don't we expire passwords on the web?
by nodata on Monday December 13, 2010 @12:12PM
(#2001121)
(I didn't say smartcards don't need passwords..)
Who wants to carry a smartcard everywhere?
Re:Why don't we expire passwords on the web?
by bensummers on Monday December 13, 2010 @11:49AM
(#2001026)
Who wants to carry their housekeys everywhere?
Certainly not me. I had to tie it to my shoelace when I was going for a run, as my running shorts don't have pockets. Now, of course, as technology has caught up, I bought a lock from Home Depot that allows me to just remember a combination and not use house keys. Much nicer.