On Wed, 2015-02-11 at 00:07 +1030, Tim wrote: > > but just to cherry-pick this specific point: Gmail 2FA allows you to > > print a list of 10 authentication codes for use in case you lose > your > > phone or change the number (and of course changing the number just > > means registering the new one when logged in). > > While that's good to know, my objections to things like that aren't > just > about Google. Other systems do some annoying authentication routines, > and it's going to be a real pain having to deal with yet more schemes, > each different. Several attempts have been made to unify authentication system (OpenAuth being one). They all have problems. A recent one that looks very interesting is a proposal from IBM (https://idemixdemo.mybluemix.net/). Unfortunately it means entrusting your security to a central authority. The trade-off is that services needing authentication only get to see the minimum information they need to make a decision. poc -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org