Hacker News Reader

A very good point. One of the most important things about strong authentication schemes is the revocation protocol. When things go bad, how easy and secure is the process of changing the auth mechanism? The trouble with fingerprints is that you're stuck with them for life, even if somebody else <pun> gets their hands on them </pun>.

View on HN

Wouldn't the revocation process be very simple? If some one has acquired your prints, just stop using touch ID? I mean, there are still 2 other authentication options on the iPhone.

There are also 9 other fingers. Granted, not all of them are convenient to use.

That's a bit like saying "if someone has compromised your SSL certificate, stop using SSL; how about Kerberos?"

Reply on news.ycombinator.com