Launch HN: Keyri (YC S21) – Secure smartphone-based passwordless authentication

Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by qzw on Wednesday August 04, 2021 @06:34PM (#28067320)

So are you saying that even if the bad actors found out how the secret sauce works, they would not be able to spoof a legit page? In other words, is the obscurity in the CV part purely for competitive reasons, or does it also serve a security purpose?

[ Parent | on HN ]

Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by thekeyper on Wednesday August 04, 2021 @06:41PM (#28067401)

Yes, even if bad actors figured out the secret sauce, they couldn't defeat it easily. It's possible, but if they hack you the way they'd have to hack you in order to defeat our CV element, you'd have much bigger problems to worry about. So yes, the lack of disclosure is for competitive reasons, not for security purposes.

[ Parent | on HN ]