Hacker News new | ask | show | jobs
by antaviana 3292 days ago
Email deliverabilty is not necessarily 100%. Also there can be latencies here and there that can lead to user frustration (for example greylist strategies).

One alternative for password-less is to use Google Authenticator code as the password (i.e. send the QR code once by email and from then on use the Google Authenticator code), but I'm not sure if the the low entropy (1/1000000th chance of guessing the right password) would be enough for brute force attacks.