MIME-Version: 1.0
Sender: marek@palatinus.cz
In-Reply-To: <CANEZrP15xWWq2jU5yKjG+9hp___OovtbH+vM5KkzFcaQ=koRow@mail.gmail.com>
References: <CA+WZAEp3HsW5ESGUZ7YfR1MZXGC5jd+LucUt_MUP8K94Xwhuhg@mail.gmail.com>
	<CANEZrP0KVyp2Va7Wyy=t0qYkLNK9BDUaSzBfuzQss+=weLJ1Fw@mail.gmail.com>
	<CA+WZAEqYKv8T1OMCKhOJvf5FAy=WujJ=OhtsYP9aBf=4ZPNxmw@mail.gmail.com>
	<CANEZrP0DTYqobECBbw6eZqdk+-TR_2jhBtOviN08r31EQGmZHQ@mail.gmail.com>
	<CANEZrP2Z5x0_kOQ=8-BMzbmi9=D=ou=s3dgEksMA5F84BHSt9A@mail.gmail.com>
	<CA+WZAEqREDkDvmhM7AY+Ju3fkm3uOGm39Ef9+SYoEr43ybbg2Q@mail.gmail.com>
	<CANEZrP15xWWq2jU5yKjG+9hp___OovtbH+vM5KkzFcaQ=koRow@mail.gmail.com>
From: slush <slush@centrum.cz>
Date: Fri, 4 Apr 2014 17:00:09 +0200
Message-ID: <CAJna-Hji-kyM8J3GFDmpAwHksX1qmJBuR7yWDVaMG2GT=FeqNg@mail.gmail.com>
To: Mike Hearn <mike@plan99.net>
Content-Type: multipart/alternative; boundary=047d7b6769e8eff56a04f638c7b0
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Draft BIP for seamless website
 authentication using Bitcoin address
Precedence: list

--047d7b6769e8eff56a04f638c7b0
Content-Type: text/plain; charset=ISO-8859-1

On Fri, Apr 4, 2014 at 4:51 PM, Mike Hearn <mike@plan99.net> wrote:
>
> I don't want to suggest the problem is unimportant - I'd love it if the
> world could move beyond passwords. But I have many scars from my time in
> the Google account swamps. We had a big team, lots of resources and even
> just getting people to use their phone as a second factor - *the simplest
> second factor possible* - was a huge uphill battle that most users just
> didn't care about. People like passwords. If you can find a way to make
> something that's better than a password but just as convenient, fantastic!
> But I don't think Bitcoin addresses are such a thing.
>
>
With all respect to your experience, I think you're wrong, for one reason.

2fa auth doesn't *remove* the need of password. It actually *adds* yet
another layer, which complicates stuff for average user. Common user, which
is not paranoid enough (like me) simply don't think he has anything to
hide, so they simply don't see why they should *complicate* their live with
2fa, backing up their phone etc.

In the oposite, authentication based on bitcoin wallet could make the
process much easier and remove the need of passwords at all, because people
*already* care about safe storage of their coins.

Marek

--047d7b6769e8eff56a04f638c7b0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">=
On Fri, Apr 4, 2014 at 4:51 PM, Mike Hearn <span dir=3D"ltr">&lt;<a href=3D=
"mailto:mike@plan99.net" target=3D"_blank">mike@plan99.net</a>&gt;</span> w=
rote:<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:so=
lid;padding-left:1ex">

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><div=
>I don&#39;t want to suggest the problem is unimportant - I&#39;d love it i=
f the world could move beyond passwords. But I have many scars from my time=
 in the Google account swamps. We had a big team, lots of resources and eve=
n just getting people to use their phone as a second factor - <i>the simple=
st second factor possible</i>=A0- was a huge uphill battle that most users =
just didn&#39;t care about. People like passwords. If you can find a way to=
 make something that&#39;s better than a password but just as convenient, f=
antastic! But I don&#39;t think Bitcoin addresses are such a thing.</div>


</div></div></div>
<br></blockquote><div><br></div><div>With all respect to your experience, I=
 think you&#39;re wrong, for one reason.</div><div><br></div><div>2fa auth =
doesn&#39;t *remove* the need of password. It actually *adds* yet another l=
ayer, which complicates stuff for average user. Common user, which is not p=
aranoid enough (like me) simply don&#39;t think he has anything to hide, so=
 they simply don&#39;t see why they should *complicate* their live with 2fa=
, backing up their phone etc.</div>

<div><br></div><div>In the oposite, authentication based on bitcoin wallet =
could make the process much easier and remove the need of passwords at all,=
 because people *already* care about safe storage of their coins.</div>

<div><br></div><div>Marek</div></div></div></div>

--047d7b6769e8eff56a04f638c7b0--