Shared secret authentication is pretty much always a bad idea. I'm continually s... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

swiley on May 12, 2021 | parent | context | favorite | on: I could send any text message from Indian governme...

Shared secret authentication is pretty much always a bad idea. I'm continually shocked people still use it.

asaddhamani on May 12, 2021 [–]

So what is the better option according to you?

swiley on May 12, 2021 | [–]

Some kind of PKI, probably with an organization wide CA.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact