News for hackers. Stuff that matters.

A comment on Don't use third party auth to sign in. Parent comment

Re:Don't use third party auth to sign in by Ajedi32 on Saturday November 14, 2020 @02:05PM (#25094700)
There's been a W3C standard that meets all those requirements for a couple years now: https://www.w3.org/TR/webauthn/

Only problem is there aren't any password managers that implement it, so it's not actually practical to use as a primary authentication factor yet.

[ Parent | on HN ]
Re:Don't use third party auth to sign in by anderslemke on Saturday November 14, 2020 @04:59PM (#25096024)
WebAuthn is great! I don't see any reason why Promise shouldn't implement it.

I see it this way, that Promise makes it possible for all its relying parties leverage WebAuthn by implementing it once, so they don't have to.

[ Parent | on HN ]