[ale] researcher develops new secure login procedure

[Ron Frazier (ALE)]

Hi all,

Steve Gibson has just announced some new secure login research he's been doing.  It looks pretty promising and may ultimately be able to substantially replace or augment user names and passwords.  I thought I'd pass it along.  He says it's generating lots of interest, including some from the w3c.  It's open spec and open standard and he's giving it away.  Maybe it will become a standard someday.

This is from the website:

<quote on>

Proposing a comprehensive, easy-to-use, high security replacement for usernames, passwords, reminders, one-time-code authenticators . . . and everything else.

With Secure QR Login, your phone snaps the QR code displayed on a website's login page . . . . and YOU are securely logged in.

The SQRL system (pronounced “squirrel”) revolutionizes web site login and authentication. It eliminates every problem inherent in traditional login techniques.

</quote off>

I'm not going to even attempt to describe it.  I'll leave that to his website and podcast.

They discuss it on two recent podcasts, along with lots of other things.  Here are some links.

https://www.grc.com/sqrl/sqrl.htm
http://twit.tv/show/security-now/424
http://twit.tv/show/security-now/425

To be honest, the discussion on the podcast rambles a lot.  If you want to get to the heart of the matter, go to the first link where he has docs on the website.

If you want to help in the development, they have news groups where you can join in.

Sincerely,

Ron



--

Sent from my Android Acer A500 tablet with bluetooth keyboard and K-9 Mail.
Please excuse my potential brevity if I'm typing on the touch screen.

(PS - If you email me and don't get a quick response, you might want to
call on the phone.  I get about 300 emails per day from alternate energy
mailing lists and such.  I don't always see new email messages very quickly.)

Ron Frazier
770-205-9422 (O)   Leave a message.
linuxdude AT techstarship.com
Litecoin: LZzAJu9rZEWzALxDhAHnWLRvybVAVgwTh3
Bitcoin: 15s3aLVsxm8EuQvT8gUDw3RWqvuY9hPGUU