Top all-time · #25331
Chris DeCairos
Personal blog · chrisdecairos.caprogrammingsecurity
Chris DeCairos's personal blog at chrisdecairos.ca covers programming and security. Since 2014, 3 different Hacker News readers have linked it 3 times. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Posts on one-time and passwordless login, including short-lived pronounceable login keys and long-lived email login links. HN readers cite them for the technical details of the proposed scheme.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
My Space. Not MySpace.
Most-linked posts?
- /one-time-passwords-pt-2/2 people · 2 mentions · first linked 2014-10-12
What Hacker News says?
More technical details here from the post: https://chrisdecairos.ca/one-time-passwords-pt-2/ I'm not totally clear about what the different between a "login key" (short-lived, pronounceable) and whatever is contained in these semi-permanent login email links (~1 year, presumably non-pronounceable).
Comment linking /one-time-passwords-pt-2/
on “One Less Password”Submitted Deploying Mattermost to Heroku as a story · 2 points
HN discussionNot a bad idea but the chief drawbacks I see: 1. Needs a very long-lived session to be convenient. Elsewhere they note their's is a whole year.[1] That's a long time to go without reauthenticating a client! 2. Authentication is or should be a much more common event than recovering a lost password, and now that's totally dependent on your email provider. One concern is latency.. a minute can feel like an hour while w…
Comment linking /one-time-passwords-pt-2/
on “One Less Password”