Re: Secure login: A replacement for passwords, tokens and everything else
Posted by fiammybe on 1380879888
Interesting approach, even if it could be overkill for some users. This seems to be a form of two-factor authentication, but backwards 
Using 2-factor authentication, you get a code via a phone app that you have to put into the login page. Here, you get a code via the login page that you enter (via QR code) in the app.
What puzzles me is how you can login on your pc, by doing some stuff in an app. Would the random number be the linking element perhaps?
Other risk is that your 'keys' are stored on your smartphone. You'll need to have some pretty nifty security in place to prevent those to get breached.
Using 2-factor authentication, you get a code via a phone app that you have to put into the login page. Here, you get a code via the login page that you enter (via QR code) in the app.
What puzzles me is how you can login on your pc, by doing some stuff in an app. Would the random number be the linking element perhaps?
Other risk is that your 'keys' are stored on your smartphone. You'll need to have some pretty nifty security in place to prevent those to get breached.
This Post was from: https://www.impresscms.org/iforum/viewtopic.php?topic_id=5550&post_id=48962