undefined | Better HN

0 pointstremon4y ago0 comments

Yes, it starts its life as a password. After that, it is never communicated ever again, and therefore, after the initial exchange, it's something you have.

It seems to me you are ascribing properties to "something you have" that aren't warranted. The "something you have" needs to prove you were party to the initial exchange, not necessarily that you were the only one present -- that's why we use two factors, and not only TOTP.

0 comments

thaumasiotes4y ago

I can't follow what you're trying to say.

> The "something you have" needs to prove you were party to the initial exchange

This is not something that can be proven at all. Accordingly, proving it is not a goal. Anything that can be had can also be transferred. Your delegated agent's login attempt is just as valid as yours is.

j / k navigate · click thread line to collapse

0 pointstremon4y ago0 comments

Yes, it starts its life as a password. After that, it is never communicated ever again, and therefore, after the initial exchange, it's something you have.

0 comments

thaumasiotes4y ago

I can't follow what you're trying to say.

> The "something you have" needs to prove you were party to the initial exchange

j / k navigate · click thread line to collapse