Not entirely - I just think that the concept of a "master password" is still quite a bit broken. I would love if there were more biometric ways of me proving my identity to some system that maintained all these secure tokens that was also somehow revoke-able. I realize that may relate to mental memory.
For now, I guess it looks like a master password, which yes this paper elucidates methods for. But as long as you're memorizing 1 password (not 400), then how you manage to memorize it is of fairly small systemic gain.
Comments
Right, and I think it's a good idea. codemac and lisivka apparently disagree.
Not entirely - I just think that the concept of a "master password" is still quite a bit broken. I would love if there were more biometric ways of me proving my identity to some system that maintained all these secure tokens that was also somehow revoke-able. I realize that may relate to mental memory.
For now, I guess it looks like a master password, which yes this paper elucidates methods for. But as long as you're memorizing 1 password (not 400), then how you manage to memorize it is of fairly small systemic gain.