Why Consumer Authentication Is Broken (opens in new tab)

(corbado.com)

3 pointsp0seidon1y ago10 comments

10 comments

As long as there is any need for authentication, the upside from consumers will be drastically limited no matter what you do.

That's one big elephant in the room that a strong sense of "broken" comes from.

p0seidonOP1y ago

I think passkeys will bring us automatic authentication, where you can establish an automatic login with consent across all operating systems. The operating system would silently log you in the background. Do you think this could lead to privacy discussions, even if it adds security?

fuzzfactor1y ago

>this could lead to privacy discussions, even if it adds security

These discussions have a lot of catching up to do.

I'm no expert, but I think privacy needs to be the highest priority. The purpose of security measures should be first to preserve privacy, as they work to mitigate other threats if possible.

I just don't think I would be a happy camper with a single point of failure for both identity and security.

Really have no use whatsoever for a Microsoft account or anything like that.

1 more reply

crystalshorror1y ago

"As long as there is any need for authentication, the upside from consumers will be drastically limited no matter what you do."

What do you mean by this?

p0seidonOP1y ago

I guess from a tech perspective, we can now create solid connections between clouds and consumer accounts without the need for social logins (device/cloud -> websites). We will be flying to Mars and have self-driving cars, yet we still have to juggle passwords and password managers.

1 more reply

j / k navigate · click thread line to collapse

10 comments

fuzzfactor1y ago

As long as there is any need for authentication, the upside from consumers will be drastically limited no matter what you do.

That's one big elephant in the room that a strong sense of "broken" comes from.

p0seidonOP1y ago

fuzzfactor1y ago

>this could lead to privacy discussions, even if it adds security

These discussions have a lot of catching up to do.

I'm no expert, but I think privacy needs to be the highest priority. The purpose of security measures should be first to preserve privacy, as they work to mitigate other threats if possible.

I just don't think I would be a happy camper with a single point of failure for both identity and security.

Really have no use whatsoever for a Microsoft account or anything like that.

1 more reply

crystalshorror1y ago

"As long as there is any need for authentication, the upside from consumers will be drastically limited no matter what you do."

What do you mean by this?

p0seidonOP1y ago

1 more reply

j / k navigate · click thread line to collapse