The_Decryptor

I’m still annoyed that “OPAQUE” never seemed to catch on. Uses a username/password combo as normal, but never actually sends the password to the server, only a proof of knowledge. Even if the server is hacked and the DB leaked the attackers can’t actually recover anything resembling a password from it, since the server simply never possesses it.

Passkeys are superior (No password at all), if only the UX around them was better.

We’re as close to quantum computers as we are to ChatGPT becoming sentient.