Secure Quick Reliable Login (SQRL) - Questions about the security properties of the the SQRL authentication scheme and its implementation.
Questions tagged [sqrl]
3 questions
38
votes
7 answers
Could SQRL really be as secure as they say?
I just came across https://www.grc.com/sqrl/sqrl.htm
With Secure QR Login, your phone snaps
the QR code displayed on a website's login
page . . . . and YOU are securely logged in.
This seems like it would be pretty awesome - one of the…
Wayne Werner
- 1,755
- 3
- 15
- 20
6
votes
1 answer
Is there any privacy- or security-relevant difference between FIDO2 and SQRL
I just learned about FIDO2 (WebAuthn) and try to make a comparison to the lesser-known novel SQRL authentication scheme.
Both seem to use the same key elements:
a private, user-resident "master key" thus not relying on a 3rd party like OAuth.
a…
Marcel
- 3,494
- 1
- 18
- 35
1
vote
0 answers
Has SQRL been extensively audited?
SQRL - Secure, Quick, Reliable Login - is an open draft for user authentication.
Have there been "enough" publicly available tests to make any backed statements about the security of SQRL?
user163495