Re: FIDO alliance & Web Crypto?

On 2013-05-17 09:33, Anders Rundgren wrote:
> http://www.fidoalliance.org/how-it-works.html
> 
> http://www.engadget.com/2013/04/24/google-joins-fido-alliance-board-support-oepn-two-factor-authentication-standard/
> 
> Anders
> 
> 

"Browser Plugin"
It feels a bit odd that the "Google Identity Team" pushes a scheme
that requires browser plugins.  Weren't these considered evil?

"Device Specific Module"
Although Microsoft claims that their "MiniDriver" is the future, the reality
is that token interoperability particularly with respect to provisioning
remains a major hurdle for large-scale adoption.  There's no support in Windows
for administrating tokens and there will never be such a facility either.

A "Web Token" with a _fixed_ API and middleware could actually have worked...

Hum, didn't I tell ya that some 4 years ago? :-) :-)

Anders

Received on Saturday, 18 May 2013 03:25:02 UTC