Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SQRL - Replacement for usernames and passwords

grc.com

Post reply on HN
Print view View original

51–60 of 138 posts

Re: SQRL - Replacement for usernames and passwords

#52

Post by chj »

teleclimber wrote: post #47
seldo wrote: post #43

How do you log in to a mobile site if you have to use your phone to scan the code?

I assume that in addition to the QR code there would be a link that would trigger an intent to open the authentication app with the necessary data. At least on Android that's how it could work.

A minor problem is that auth app has to return back to the browser with a new link which the browser may not be able to open within the original login tab.

Re: SQRL - Replacement for usernames and passwords

#53

Post by jonny_eh »

veesahni wrote: post #10
tptacek wrote: post #5

How is this better than any other phone-based 2-factor auth scheme?

It's 1 step. Just scan a code. Con: requires internet connectivity, unlike some 2-factor implementations

Isn't access to the internet already required to log into any internet site?

Re: SQRL - Replacement for usernames and passwords

#54

Post by phpnode »

DanBC wrote: post #36
phpnode wrote: post #20

Earlier quoted context omitted.

drivebyacct2 - your account has been dead for about 100 days and 200 posts, basically no one can seen your messages unless they have showdead on. Here's the "offending" post that you were banned for https://news.ycombinator.com/item?id=5982741 (hint - the ban is completely unjustified)

Ahem. ( https://news.ycombinator.com/item?id=5974604 )

didn't see that, but even so, this is still a horrible punishment

Re: SQRL - Replacement for usernames and passwords

#57

Post by habosa »

This looks like a much less polished version of Clef (https://getclef.com/). Clef is a really awesome app and they're already powering this type of integration for a few hundred websites. One of the founders is an HN regular, although I can't remember his username (Jesse, reply if you see this).

Re: SQRL - Replacement for usernames and passwords

#59

Post by Mithaldu »

This is functionally the same thing as https://github.com/habnabit/passacre , only tied to a cellphone in exchange for sparing the user the burden to remember their login. It would be interesting if the SQRL website code would also display the nonce under the QR and the user could download a desktop program to paste the nonce in. Even if it weren't open source, as long as both windows/linux binaries are available, people could even set it up on a server of their own so they'd just paste the nonce at a private url.

Re: SQRL - Replacement for usernames and passwords

#60

Post by teleclimber »

chj wrote: post #52
teleclimber wrote: post #47

Earlier quoted context omitted.

I assume that in addition to the QR code there would be a link that would trigger an intent to open the authentication app with the necessary data. At least on Android that's how it could work.

A minor problem is that auth app has to return back to the browser with a new link which the browser may not be able to open within the original login tab.

I don't think that is the case. After the auth app communicates with the server you just need to click the login button on the original page. I don't think the auth app needs to load a specific url.
Post reply on HN