News for hackers. Stuff that matters.
Re:API Shouldn't Redirect HTTP to HTTPS by JohnFen on Thursday May 30, 2024 @12:27PM (#40525584)
I disagree that hardware security keys or passkeys are more convenient. I ditched them because they greatly complicated authentication for me.
Re:API Shouldn't Redirect HTTP to HTTPS by j5155 on Friday June 07, 2024 @01:20AM (#40605565)
Interesting; I have had the opposite experience. Many websites will directly enroll my Yubikey and will even let me use it instead of a password, and logging in is as simple as touching the button at the prompt. It’s honestly much simpler then using a password for me, and MUCH more convenient then pulling out my phone for 2fa codes (especially for the university site’s painfully short session times)