Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Thursday September 26 2019, @08:59AM   Printer-friendly
from the woof-woof dept.

Submitted via IRC for SoyCow1337

FIDO2: The Dream Of Password-Free Authentication On The WWW

Of all the things which are annoying about the modern World Wide Web, the need to create and remember countless passwords is on the top of most people’s lists. From dozens of passwords for everything from social media sites to shopping, company, and productivity-related platforms like Github, a large part of our day is spent dealing with passwords.

While one can totally use a password manager to streamline the process, this does not absolve you from having to maintain this list and ensure you never lose access to it, while simultaneously making sure credentials for the password manager are never compromised. The promise of password-less methods of authentication is that of a world where one’s identity is proven without hassle, and cannot ever be stolen, because it relies on biometrics and hardware tokens instead of an easily copied password.

The FIDO2 project promises Web Authentication that means never entering a password into a website again. But like everything, it comes with some strings attached. In this article, we’ll take a look at how FIDO2 plans to work and how that contrasts with the state of security in general.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by PiMuNu on Thursday September 26 2019, @10:59AM (3 children)

    by PiMuNu (3823) on Thursday September 26 2019, @10:59AM (#899047)

    I will let you send your credit card number in plain text. Best of luck!

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 4, Insightful) by deimtee on Thursday September 26 2019, @12:47PM (1 child)

    by deimtee (3272) on Thursday September 26 2019, @12:47PM (#899069) Journal

    You go to the mattress website and get a quote for your mattress of choice plus delivery. Confirm the order and the site gives you an order number and a bank account number. You go into your banking app and transfer that amount to their account. In the reference field for the transfer you put their order number. They match deposits to orders and send you your mattress.

    --
    If you cough while drinking cheap red wine it really cleans out your sinuses.
    • (Score: 1, Insightful) by Anonymous Coward on Thursday September 26 2019, @05:54PM

      by Anonymous Coward on Thursday September 26 2019, @05:54PM (#899228)

      oh, yeah, that'll catch on. lmao

  • (Score: 2) by Mer on Thursday September 26 2019, @02:47PM

    by Mer (8009) on Thursday September 26 2019, @02:47PM (#899121)

    I use a bunch of sites where you pay via sepa transfer. Your bank info is as safe as it can be with that and there are no fees.

    --
    Shut up!, he explained.