Hacker News Reader

As you will have seen in lots of other posts to this topic, people want privacy and "I just show my membership ID everywhere, what's the problem?" unsurprisingly is not what they had in mind.

So, FIDO preserves privacy by minting unique credentials for each site where you use it. This is invisible to the user of course, for them it's just the case that you use your FIDO authenticator everywhere (that it works) and now it's secure.

View on HN

I understand that. I was responding to the idea that hardware tokens like yubikey, in fact all alternatives to passwords, are too complicated for regular people to understand. And also saying that multiple options, to accommodate different people/scenarios, are fine and don't have to be complicated from the user's perspective. By way of analogy (admittedly I didn't make that very clear).

Reply on news.ycombinator.com