Re:API Shouldn't Redirect HTTP to HTTPS
by JohnFen on Thursday May 30, 2024 @12:27PM
(#40525584)
I disagree that hardware security keys or passkeys are more convenient. I ditched them because they greatly complicated authentication for me.
[ Parent
| on HN ]
Interesting; I have had the opposite experience.
Many websites will directly enroll my Yubikey and will even let me use it instead of a password, and logging in is as simple as touching the button at the prompt. It’s honestly much simpler then using a password for me, and MUCH more convenient then pulling out my phone for 2fa codes (especially for the university site’s painfully short session times)