Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Really excited for this. Password authentication is an absolute disaster on the Internet, and despite at least 8 years of development solutions like OpenID are not succeeding fast enough. Mozilla Persona looks really promising. Sure wish there were a Chrome extension for it!


There isn't a Firefox extension yet, either. :) JavaScript polyfills are fun!

(Persona works on all major browsers, save MobileIE and Chrome for iOS. Fixes are in the works for those two.)


I wish TLS-SRP was more prominent or that some mutual auth protocol was common (http://arxiv.org/abs/0911.5230).

Then you're never sending anything sensitive to the server.

Sure, it still has the issue of the user choosing a good password, but persona doesn't really get around this, just makes the mail server deal with it.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: