I didn't say it was solved. It's just what people do and solve their rotation needs right now. You can't build anything that is harder than that for the user. Otherwise, they will just go back to that simple thing.
Login to reply
Replies (2)
Yes, in the case they don't care, but if the case is complex like a valuable account, social engineering, impersonation etc users would go and collect proofs to make the transition more legit. Right now there is no way to make this more than outband communications
Make the transition more legit can also be used by attackers to make their attack more legit. That's where all crypto-first ideas die.
I think it will always be out of band communications. At least I have not seen a single idea that doesn't require active web of trust verifying things around it... Which is the same as the kind 1 post.