Post
Topic
Board Project Development
Re: [ANN] Clef is secure two-factor authentication with no passwords or tokens
by
fordlincoln
on 01/03/2015, 21:00:12 UTC
Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.
Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

Any 2FA system should be trustless and open source.
i dont think this one is

Not every 2FA system is trustless nor open source. Google Auth and Authy are certainly not.

Clef documentation outlines they don't hold any private keys. The private key is kept on your phone and only the public key is shared with the Clef server to authenticate the OAuth handshake.

http://docs.getclef.com/v1.0/docs/authenticating-users

So they can lure in open source projects and then jack the rates up at will or sell information they gather to seo's? Ya sure


Lure in open source projects? Not sure where that came from as it's purely a 2FA alternative to whats already out there. Atleast they don't share your information without permission.

It's free for users unless you're a website owner.
They get usage analytics -

Projects in Bitcoin that are using it currently:
Koinify.com
Betmoose.com


"Clef does not share personally identifiable information with third parties without your permission. When you register at a new site that integrates Clef, we will notify you of what information the site requires and you must give permission in order for us to share it. Once you approve, the other site owns that information and we are not responsible for their use.

Clef does not sell, rent, or lease its customer lists to third parties.

Clef keeps track of websites users log in to using Clef. Any information you provide on those sites is shared with the owner of that site and subject to their privacy policy. Our privacy policy does not apply to such sites, and we are not responsible for the content or privacy and security practices and/or policies of those sites."

https://getclef.com/privacy/