nanog mailing list archives

How to fix authentication (was LinkedIn)


From: Jay Ashworth <jra () baylink com>
Date: Wed, 20 Jun 2012 19:26:45 -0400 (EDT)

----- Original Message -----
From: "Leo Bicknell" <bicknell () ufp org>

SSL certificates could be used this way today.

SSH keys could be used this way today.

PGP keys could be used this way today.

What's missing? A pretty UI for the users. Apple, Mozilla, W3C,
Microsoft IE developers and so on need to get their butts in gear
and make a pretty UI to create personal key material, send the
public key as part of a sign up form, import a key, and so on.

Yes, but you're securing the account to the *client PC* there, not to
the human being; making that Portable Enough for people who use and
borrow multiple machines is nontrivial.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra () baylink com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA      http://photo.imageinc.us             +1 727 647 1274


Current thread: