I don't like this proposal, simply because e-mail and SMS are not secure. Something like SQRL sounds much better to me, in contrast.
> What is the benefit over traditional usernames & passwords?
- There are no usernames or passwords to have compromised, lost or stolen.
- No keyboard interaction, great for using public computers that could log your keystrokes.
- You only need your Master Key, no lists of usernames and passwords to keep track of.
- There is NO WAY to link one person across sites based only on the site-specific public key, websites may ask for more infomation that could be tracked.
Comments
I don't like this proposal, simply because e-mail and SMS are not secure. Something like SQRL sounds much better to me, in contrast.
> What is the benefit over traditional usernames & passwords?
- There are no usernames or passwords to have compromised, lost or stolen.
- No keyboard interaction, great for using public computers that could log your keystrokes.
- You only need your Master Key, no lists of usernames and passwords to keep track of.
- There is NO WAY to link one person across sites based only on the site-specific public key, websites may ask for more infomation that could be tracked.
http://sqrl.pl/guide/
https://www.grc.com/sqrl/sqrl.htm