Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> You just need to connect the key to your account

Which account? Where is the account? Who runs that account?

In a 10-person office, I want to be able to hand 3 keys to each person (1 for use, 1 for loss, and 1 just in case the other two somehow foul up), and then have them use those keys for computer login, email login, AWS login, GCP login, NXP/ST/SiLabs support forum login, etc.

And when one of them goes to another company (it happens), I need to be able to shut those keys down without their cooperation.

Until I can do this, 2FA is going to remain the province of big companies and not be very useful.



So basically you need SSO with an identity provider that supports key-only logins. Perhaps SimpleSamlPHP with privacyIdea would fit the bill.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: