Hacker News Reader

Yes, people are good at managing physical things. The issue I'm guessing you'll run up against is the implementation. You have to convince every developer to adopt a new mechanism for authentication. I don't think passwords will be displaced very soon; they are just too easy to implement.

View on HN

We currently support OpenID, so any site/service supporting OpenID works with the Mepin keys. Sadly there are a lot of shaky OpenID implementations out there, so yes the implementation is a challenge. And I do also agree that we will never get rid of all the passwords.

Not necessarily. All you need is browser extensions that mimic the built-in remember password functionality, and a hardware-encrypted USB key that serves as a data store for the browser extensions.

That does reduce the USB key to a single point of failure though. That risk could be mitigated with a proprietary key copier.

A standard way to generate key pairs for authentication would be a lot better though. (Really, there's no reason we couldn't use SSH private keys with some simple client and server plugins.)

Reply on news.ycombinator.com