Quote from: Stingery64 on July 08, 2014, 11:06:05 AM

i guess is more easy to just wirte the google password than copy a string, sign an address with the string, an paste back the result in order to tell the system you are the real user,

google 2FA
go to website, type in username, type in password. press subitmit. get the google code, switch tabs
type google.com, click sign in. type in email. type in password. click login. go to authenticator. paste it into authenticator, press ok. copy response code. switch tabs back to website, paste code. pres submit

bitcoin type in username, press submit, get passphrase. go to bitcoin program. click sign message paste passphrase. press sign button, press copy to clipboard. switch back to website, paste signed message. press login

hmmm bitoin seems shorter and no need for 30 second time limit to irritate people

Quote from: Stingery64 on July 08, 2014, 11:06:05 AM

maybe some standar in HTML5 or a browser extension that allows you to register and login to websites just by pressing a mouseclick and send the string to the hardware wallet, press the hardware button that sign it, and you are logged, registered, or whatever, no need to remember password, no spam, no mails, no option to access the private keys...

no need for extensions that need the privkey saved (to sign messages) i can already smell fishy implications.. most SMART bitcoiners already have their bitcoin nodes running in the background so its just a click down at the task bar.. not that hard

how could anyone hack an user account that way? maybe a "man in the middle" virus would work? i mean, the virus shows him the string to sign, he signs it, i get the signed string and i can log in? if thats possible then its not that safe...
[/quote]

nothing is perfect. but:
trying to remember a lengthy single password, people end up using a short password.
trying to remember a password that changes per use, most would just use an incremental number at the end
trying to remember the password at all... yea some forget.

but with a bitcoin message login, no memory, no possibility of weak "entropy/dictionary attacks". simply verifying a bitcoin address safely stored in your existing wallet.. which you SHOULD!!! already have adequate precautions to secure anyways (not downloading bogus software or extensions)