[H-GEN] Anyone heard of SQRL before...?

[Daniel Devine]

On 2013-10-04 10:35 AM, Gary Curtis wrote: 

> A different type of authentication using QR codes...
> 
> https://www.grc.com/sqrl/sqrl.htm [1]
> 
> Comments...?

I've never heard of it. It looks interesting because of the out-of-band
aspect. 

I don't want to be fucking around with a phone just to log in. You
probably could make a browser extension to read the QR code and do the
response. 

A good about this approach is that it doesn't require the user to really
keep anything, unlike my system where they have to keep private keys.
(http://ddevnet.net/posts/anonymous-authentication-with-pk.html [2])
Though, persistent keys allow for features such as encrypted
messaging... 

-- 
Daniel Devine
 

Links:
------
[1] https://www.grc.com/sqrl/sqrl.htm
[2] http://ddevnet.net/posts/anonymous-authentication-with-pk.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.humbug.org.au/pipermail/general/attachments/20131004/514066c8/attachment.html>