Ask HN: Why no one supports multi-signer auth?

https://twitter.com/ZainanZhou/status/1987943797893030229

by xinbenlv • 8 months ago

1 1 8 months ago

xinbenlv• 8 months ago

Wise @X friends: why have major authentication providers like @auth0 and @ClerkDev and @Google / @LinkedIn SSO have not supported "Multi-Signer Authentication": instead of a single signer, simply ask for more signers to authenticate an action (login, or approval).

For example, when traditionally a low risk action would be validated with a single email confirmation, a high risk action (change password, add passkey) will require two different email confirmation with two different email domains, and plus, a user can add N email addresses (trusted contacts) and a min M of these email addresses can help approve a change of email.

This is not very much different from what @safe achieves already using smart contract, but is massively backward compatible with emails

This will massively reduce the chance of social engineering.

Ask HN: Why no one supports multi-signer auth?

Related Stories