Replying to Avatar HoloKat

I still think nsecs should be disposable. Instead of guarding it like your life depends on it, would be best to have an ability to recover via some sort of porting (when a key is created, have it delegate another recovery key or something). This way you don't need to be so careful and if one leaks, have the ability to recover from the other (at the same time delegating a new key).

What's wrong with this thinking? Am I overlooking something? Or is this just technically not possible?
Avatar
Jeroen ✅ 1y ago

Think this is correct and quite necessary for the key system to work. Hope to see it soon

Reply to this note

Please Login to reply.

Discussion

Avatar
HoloKat 1y ago

I see people proposing signing devices and not connecting key to internet. This is insane ask imo. People are NOT going to jump through that hoop. I bet if you looked at 2FA hardware usage it's probably a tiny percentage.

Avatar
Jeroen ✅ 1y ago

Yeah for sure. Hardware signing is cool for the tech enthusiasts and innovators, but obviously too high friction for any service you want to be constantly connected with.