News for hackers. Stuff that matters.
Re:Ask HN: Why aren't one-time sign in links more popular fo... by gfodor on Monday January 04, 2021 @10:43AM (#25632754)
Isn't the problem with this that it means your account is tied to your browser install? Eg, you'd need to copy the cert to another machine to sign in, would need to ensure it's backed up, etc.
Re:Ask HN: Why aren't one-time sign in links more popular fo... by randomdata on Monday January 04, 2021 @10:54AM (#25632889)
Password management already is to basically that extent and the tools to copy that information around, backup, etc. also have come into existence to support usage beyond a single browser install.
Re:Ask HN: Why aren't one-time sign in links more popular fo... by gfodor on Monday January 04, 2021 @02:14PM (#25636398)
That's half true, password management piggybacks on top of a system which doesn't have these characteristics, so it means no special work needs to be done on the development side to support them, and it's activation function is only determined on one side of each edge (the user side.) For this cert system to work, you have a bit of a chicken-and-egg problem since it requires both sides of the user-service graph to have done work pre-emptively to support it.