Comment

Comment by saosebastiao

I mostly cringe at the argument I quoted because it is often misapplied due to how we have historically misapplied passwords.

A username is an identity. Historically due to the difficulty of verifying identities online, we have used passwords as a way to do so. And when all we need to do is verify an identity or control basic access levels (the bathroom lock!), a fingerprint is absolutely good enough. But a password is more authorization than authentication: requiring a password is appropriate when you need a conscious decision, not mere identification. Such as for paying for Pokémon toys.

So essentially what I'm saying is that I agree with you.

parent saosebastiao 10 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton