|
|
|
|
|
by lucideer
607 days ago
|
|
That list makes for a nice slidedeck but the separation (like many things in tech) isn't as clear cut as the metaphor. "Something you know" (password) becomes "something you have" as soon as you store/autogenerate/rotate those passwords in a manager (which is highly recommended). "Something you have" in the form of a hw key is still that device generating a key (password) that device/browser APIs convey to the service in the same way as any other password. "Something you are" is a bit different due to the algorithms used to match biometric IDs but given that matching is less secure than cryptographic hash functions - this factor is only included in the list for convenience reasons. The breakdown of this metaphor is one of the reasons passkeys are seen as a good thing. |
|