One step closer to a passwordless future

https://blog.google/technology/safety-security/one-step-closer-to-a-passwordless-future/

by HieronymusBosch • 4 years ago

20 16 4 years ago

blog.google

bertman• 4 years ago

Here's the joined announcement by Google, Apple and Microsoft under the FIDO alliance umbrella:

https://fidoalliance.org/apple-google-and-microsoft-commit-t...

josteink• 4 years ago

That’s a whole lot of text saying “things will be simpler” on repeat, without specifying how things are going to be and why that is simpler.

Anyone got a link to something less hand-wavey and more concrete?

missosoup• 4 years ago

So their vision of the future is that to do anything online, one MUST have a phone (ahem, portable wiretap)? And Google is going to be keeping my secrets for me, for my own good?

I'm not sure I'm down with any of that.

mikro2nd• 4 years ago

... especially since I choose to no longer have a phone/tracking device.

aquir• 4 years ago

Not just a phone, an Android Phone! The login popup thingy (Google Prompts) is not available for any other mobile OS but for Android :(

danirod• 4 years ago

I use iOS devices and I get a login prompt using the YouTube for iOS app.

px43• 4 years ago

You can put FIDO creds on a 20 dollar hardware token. It's just that not everyone has that, so you can use your phone too if you want.

crate_barre• 4 years ago

Just put the chip in my heart already, I don’t give a shit anymore.

ur-whale• 4 years ago

They'll have to pry my password and 2FA device from my cold dead hands.

onebot• 4 years ago

This is not the future I want to live in. For all the talk about web3 and decentralization, this is the one thing I truly wish existed as a fully decentralized service. I would gladly pay.

baybal2• 4 years ago

Google so far been trying to do this for 6-7 years since they attempted to force push FIDO through Android.

W3C adoption stalled, and they shot them in the foot with de-facto 3 incompatible standards rolled out under the same name.

Smartcards are an alternative solution, been working for 20+ years, and they keep being sabotaged to make way for FIDO (signing/encryption/enrolment APIs being axed from browsers.)

kuschkufan• 4 years ago

What could possibly go wrong?

hackyhacky2• 4 years ago

Can someone explains to me what happens if you lose your phone, or if you temporarily lose access to it (e.g. leave it at home)?

meibo• 4 years ago

You have a backup $30 hardware key on your keychain, or you don't log in - same way you can't log in if you don't have your 2fa device nowadays.

hackyhacky2• 4 years ago

That's exactly why I don't use 2FA.

jacknews• 4 years ago

"To sign into a website on your computer, you’ll just need your phone nearby and you’ll simply be prompted to unlock it for access."

Wait, why do you need a phone to sign in to a computer if it's just cryptographic signatures? Surely they don't want to abolish online anonymity?

One step closer to a passwordless future

Related Stories