undefined | Better HN

0 pointsstaticassertion5y ago0 comments

> Educating a casual user that they need to print out recovery codes and store them in a safe place it's not exactly top notch usability.

So then have two U2F tokens. Or use your phone's TPM as a U2F token. The usability of phone-based U2F is quite good.

0 comments

3 comments · 2 top-level

Wowfunhappy5y ago· 1 in thread

A phone's TPM is the only U2F token that 99% of the world owns, assuming they own one at all.

staticassertionOP5y ago

Yes, as I've said, availability is the problem to solve. We should be shipping U2F tokens wherever we can. I'd like to see schools that require students to use GSuite and other U2F supporting sites giving students tokens for free. I'd like to see banks giving their customers tokens. I'd like to see companies giving them to employees.

IMO the problem is not "let's get some kind of 2FA" it's "let's get U2F in the hands of as many people as we can".

tsimionescu5y ago

Most people don't own two phones though, and wouldn't think to have two separate U2F tokens.

j / k navigate · click thread line to collapse