First up, you won’t win over security people with big claims of being the future of auth.
This ain’t it chief.
The future of auth is probably something involving public key cryptography and zero knowledge proofs. This scheme is just complicated and fragile with moving parts, emails, reconstructing codes, etc.
With all due respect, this scheme is flawed. Individual servers should not be storing user password components in the clear for reconstruction. Monthly Magic Links. 9 digit codes. Pink codes?
The state of the art today is a hardware enclave with a private key, and an authentication scheme that is bound to the website using browser APIs.
You might want to reconsider the name because it’s way too close to an actual real security vendor who names things this way.
The future of auth is probably something involving public key cryptography and zero knowledge proofs. This scheme is just complicated and fragile with moving parts, emails, reconstructing codes, etc.
With all due respect, this scheme is flawed. Individual servers should not be storing user password components in the clear for reconstruction. Monthly Magic Links. 9 digit codes. Pink codes? The state of the art today is a hardware enclave with a private key, and an authentication scheme that is bound to the website using browser APIs.
You might want to reconsider the name because it’s way too close to an actual real security vendor who names things this way.