One step closer to a passwordless future(blog.google)

20 pointsby HieronymusBosch4년 전16 comments

One step closer to a passwordless future

https://blog.google/technology/safety-security/one-step-closer-to-a-passwordless-future/

10 comments

So their vision of the future is that to do anything online, one MUST have a phone (ahem, portable wiretap)? And Google is going to be keeping my secrets for me, for my own good?

I'm not sure I'm down with any of that.

px434년 전

You can put FIDO creds on a 20 dollar hardware token. It's just that not everyone has that, so you can use your phone too if you want.

mikro2nd4년 전

... especially since I choose to no longer have a phone/tracking device.

aquir4년 전

Not just a phone, an Android Phone! The login popup thingy (Google Prompts) is not available for any other mobile OS but for Android :(

danirod4년 전

I use iOS devices and I get a login prompt using the YouTube for iOS app.

bertman4년 전

Here's the joined announcement by Google, Apple and Microsoft under the FIDO alliance umbrella:

https://fidoalliance.org/apple-google-and-microsoft-commit-t...

josteink4년 전

That’s a whole lot of text saying “things will be simpler” on repeat, without specifying how things are going to be and why that is simpler.

Anyone got a link to something less hand-wavey and more concrete?

hackyhacky4년 전

Can someone explains to me what happens if you lose your phone, or if you temporarily lose access to it (e.g. leave it at home)?

meibo4년 전

You have a backup $30 hardware key on your keychain, or you don't log in - same way you can't log in if you don't have your 2fa device nowadays.

hackyhacky4년 전

That's exactly why I don't use 2FA.

[deleted]4년 전

onebot4년 전

This is not the future I want to live in. For all the talk about web3 and decentralization, this is the one thing I truly wish existed as a fully decentralized service. I would gladly pay.

jacknews4년 전

"To sign into a website on your computer, you’ll just need your phone nearby and you’ll simply be prompted to unlock it for access."

Wait, why do you need a phone to sign in to a computer if it's just cryptographic signatures? Surely they don't want to abolish online anonymity?

ur-whale4년 전

They'll have to pry my password and 2FA device from my cold dead hands.

kuschkufan4년 전

What could possibly go wrong?

crate_barre4년 전

Just put the chip in my heart already, I don’t give a shit anymore.

baybal24년 전

Google so far been trying to do this for 6-7 years since they attempted to force push FIDO through Android.

W3C adoption stalled, and they shot them in the foot with de-facto 3 incompatible standards rolled out under the same name.

Smartcards are an alternative solution, been working for 20+ years, and they keep being sabotaged to make way for FIDO (signing/encryption/enrolment APIs being axed from browsers.)