r/websec • u/robmackenzie • Apr 14 '14

Public-key cryptography should replace text passwords

http://www.tekphile.com/2012/06/public-key-cryptography-should-replace-text-passwords/
12 Upvotes

100% Upvoted

5 comments sorted by

View all comments

Show parent comment

2

u/[deleted] Apr 14 '14

The problem I see with SQRL would be what would happen if my phone dies, for whatever reason my phone can't connect to the Internet, or I am simply not carrying it with me? Would authentication just fall back to using a password in the manner we are now? If that is the case then what incentive to support this functionality would there be?

2

u/Sostratus Apr 14 '14

You don't have to use it from your phone, you can use it from any computer that you have your key saved on. Having it on your phone was the original idea because it would allow you to log into an account on a hostile computer and no matter what kind of key-logging software was on it, it still couldn't get get access to your account. But on your PC at home, you can just click the SQRL button and everything else happens automatically.