Bitcoin Forum
October 23, 2018, 11:02:45 AM *
News: Make sure you are not using versions of Bitcoin Core other than 0.17.0 [Torrent], 0.16.3, 0.15.2, or 0.14.3. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: [REQ] Passwordless Login - As A Secondary Option  (Read 1410 times)
cakir
Legendary
*
Offline Offline

Activity: 1274
Merit: 1000


★ BitClave ICO: 15/09/17 ★


View Profile WWW
June 24, 2015, 12:06:47 AM
 #1

Hi, I want to propose something to new forum software.
We can add bitcoin addresses to our profiles etc. Beside standart username - password combination to log in; I propose this as a secondary login option:
When we want to log in our accounts;
Forum Software provides us a random string and we provide a signature with this message and our saved bitcoin address then forum software controls this signature if it's valid then we log into our accounts without username & password.

Possible problems on sold accounts (old owner can still log in):
X user sells M account to Y.
There'll be a panel for sold accounts & forum'll provide a random string on this panel.
User Y gives a new bitcoin address to user X; user X signs that message with the given btc address. And forum software changes user M's bitcoin address to one given by Y. That provides user Y to control over account besides classical login method.

Also this kinda login & registration methods can be used on fully anonymous boards etc.


                  ,'#██+:                 
              ,█████████████'             
            +██████████████████           
          ;██████████████████████         
         ███████:         .███████`       
        ██████               ;█████'      
      `█████                   #████#     
      ████+                     `████+    
     ████:                        ████,   
    ████:    .#              █     ████   
   ;███+     ██             ███     ████  
   ████     ███'            ███.    '███, 
  +███     #████           ,████     ████ 
  ████     █████ .+██████: █████+    `███.
 ,███     ███████████████████████     ████
 ████     ███████████████████████'    :███
 ███:    +████████████████████████     ███`
 ███     █████████████████████████`    ███+
,███     ██████████████████████████    #███
'███    '██████████████████████████    ;███
#███    ███████████████████████████    ,███
████    ███████████████████████████.   .███
████    ███████████████████████████'   .███
+███    ███████████████████████████+   :███
:███    ███████████████████████████'   +███
 ███    ███████████████████████████.   ███#
 ███.   #██████████████████████████    ███,
 ████    █████████████████████████+   `███
 '███    '████████████████████████    ████
  ███;    ███████████████████████     ███;
  ████     #████████████████████     ████ 
   ███#     .██████████████████     `███+ 
   ████`      ;██████████████       ████  
    ████         '███████#.        ████.  
    .████                         █████   
     '████                       █████    
      #████'                    █████     
       +█████`                ██████      
        ,██████:           `███████       
          ████████#;,..:+████████.        
           ,███████████████████+          
             .███████████████;            
                `+███████#,               
1540292565
Hero Member
*
Offline Offline

Posts: 1540292565

View Profile Personal Message (Offline)

Ignore
1540292565
Reply with quote  #2

1540292565
Report to moderator
1540292565
Hero Member
*
Offline Offline

Posts: 1540292565

View Profile Personal Message (Offline)

Ignore
1540292565
Reply with quote  #2

1540292565
Report to moderator
1540292565
Hero Member
*
Offline Offline

Posts: 1540292565

View Profile Personal Message (Offline)

Ignore
1540292565
Reply with quote  #2

1540292565
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1540292565
Hero Member
*
Offline Offline

Posts: 1540292565

View Profile Personal Message (Offline)

Ignore
1540292565
Reply with quote  #2

1540292565
Report to moderator
1540292565
Hero Member
*
Offline Offline

Posts: 1540292565

View Profile Personal Message (Offline)

Ignore
1540292565
Reply with quote  #2

1540292565
Report to moderator
ColderThanIce
Sr. Member
****
Offline Offline

Activity: 374
Merit: 250



View Profile
June 24, 2015, 05:16:40 PM
 #2

This sounds very similar to how #bitcoin-otc authentication works, but bitcoin-otc also supports PGP signing as well as bitcoin signing. I'd be supportive of this idea, however the one issue I'm able to think of possibly arising would be that if someone's bitcoin private key was stolen, then they could potentially lose access to their account, and would have no way to truly prove that they're the account owner, since there could be someone else signing messages with their private key as well.

ROLLIN.IO  BITCOIN   DICE   GAME
   ⚁    ⚂    ⚃    ⚄   ⚅   ⚁   ⚂
                                        ███████████████████    
                                      ██                                    ██
                                      ██                                    ██              
                                      ██                                    ██ 
                                      ██                                    ██
                                      ██                                    ██
      ██████████████████                                    ██
      ██                            ██                                    ██
      ██                            ██                                    ██  
      ██                            ██                                    ██
      ██                            ██████████            ██████
      ██                            ██              ██          ██
      ██                            ██                 ██       ██
      ██                            ██                    ██    ██
      ███████        ███████                        ████
                ██     ██
                ██  ██
                ████
             
███████████
S  O  C  I  A  L
C H A T T I N G
                    ██
                  ████
                ██████
              ████████
            ██████████
          ████████████
        ██████████████
      ████████████████
    ██████████████████
  ████████████████████ 
              ████████
              ████████

              ████████

              ████████
██████████████
LEVEL UP SYSTEM
   WITH REWADS
                ██████
              ████████
            ██████████
          ████████████
        ██████████████
    ██████████████████
  ████████████████████
█         ████████████████
█         ████████████████
█         ████████████████
█         ████████████████
   ██████████████████ 
     ████████████████
        █████████████
           ██████████
                █████
██████████████
 FREE BITCOINS
Muhammed Zakir
Hero Member
*****
Offline Offline

Activity: 560
Merit: 504


I prefer Zakir over Muhammed when mentioning me!


View Profile WWW
June 25, 2015, 08:31:30 AM
 #3

This is already in the to-do list.

-snip-

Fancy Authentication

In addition to normal password authentication, the forum should support various kinds of of alternative authentication. At least password auth, email verification, secret questions, OpenID, PGP, OpenVPN (automatic creation of subnets + IP source verification), and Bitcoin address signing should be supported, with multiple allowable credentials for each auth type. Users should have the option of requiring any combination of these auth types. Like "pgp OR (password AND OpenID)". And users should be able to require that changes to some or all auth types as well as the required combination of types not take effect for some configurable number of days. This allows for different types of recovery methods.

Link to that DOC is in theymos' post -- https://bitcointalk.org/index.php?topic=523070.0.

Blazed
Casascius Addict
Legendary
*
Offline Offline

Activity: 1904
Merit: 1089



View Profile WWW
June 29, 2015, 06:14:57 PM
 #4

This sounds very similar to how #bitcoin-otc authentication works, but bitcoin-otc also supports PGP signing as well as bitcoin signing. I'd be supportive of this idea, however the one issue I'm able to think of possibly arising would be that if someone's bitcoin private key was stolen, then they could potentially lose access to their account, and would have no way to truly prove that they're the account owner, since there could be someone else signing messages with their private key as well.

Well #Bitcoin-OTC allows you to use both Bitcoin and PGP signed auth. If you loose one you at least have the other to get your account back.

    ▄████████▄
  ▄████████████▄
 ████████████████
██████████████████
██████████████████
██████████████████
 ████████████████
  ▀████████████▀
    ▀████████▀

    █ ███ ██ █
   █ ██ ██ ██ █
  █ ██ █  █ ██ █
      █    █
   ▄  ▄█▀
   ██▄▀▀
 ▄ ▀▀▄█▀
 ██ ▀▄
▄ ▀▄█▀
▀██▀▀▄
▄▄▄ ██
 ▀▀▀▀▄█
 ▀██ █▀▄█
   ▄▄▄▄▀█ █▄
    ▀▄▄▄▄ ▀█ █▄▄
      ▀▀▀█▄▄▄ ▀▀▀ ▄
        ▀▀▀▀▄███▀ ▀
▀█▄  ▄  
▀▀▄██  
▀█▄▀▀ ▄
▄▀ ██
▀█▄▀ ▄
▄▀▀██▀
██ ▄▄▄
█▄▀▀▀▀
█▄▀█ ██▀
▄█ █▀▄▄▄▄  
▄▄█ █▀ ▄▄▄▄▀   
▄ ▀▀▀ ▄▄▄█▀▀▀     
▀ ▀███▄▀▀▀▀       
       ▄▄█████████▄▄
    ▄█████████████████▄
  ▄█████████████████████▄
 ▄███████████████▀▀▀█████▄
▄████████████▀▀     ██████▄
█████████▀▀   ▄▄▀   ███████
██████▄    ▄▄█▀    ████████
█████████▄██▀      ████████
▀██████████▄▄    ████████▀
 ▀████████▄█████▄████████▀
  ▀█████████████████████▀
    ▀█████████████████▀
       ▀▀█████████▀▀
.
.......ADD.......
yahoo62278
   ▄▄█████▄▄▄▄▄▄▄
 ▄██████████████████▄
█████████▀▀▀   ▀▀▀█████
███████            ▀████▄
██████     █████▄   █████▄
 █████▄     ▀▀▀▀██████████
 ███████▄          ▀██████
 ██████▀▀████▄▄▄▄   ▀█████
 ▀████    ▀██████    ██████
  ▀███▄     ▀▀▀▀    ███████
    █████▄▄▄   ▄▄▄█████████
      ▀██████████████████▀
          ▀▀▀▀▀▀▀█████▀▀
bimasena25
Full Member
***
Offline Offline

Activity: 187
Merit: 100

MiniCHANGER http://pulsamarket.bomberprofit.info


View Profile WWW
July 31, 2015, 03:19:34 PM
 #5

greats idea,
this is usefully make easy member to dialogue at forum, my bro

ChosenSeller
Member
**
Offline Offline

Activity: 114
Merit: 10


View Profile
August 08, 2015, 11:27:52 AM
 #6

This is 2 factor authentication right? which has already been confirmed that its going to be included using bitcoin address to sign with. not sure about PGP yet but I would think so
Muhammed Zakir
Hero Member
*****
Offline Offline

Activity: 560
Merit: 504


I prefer Zakir over Muhammed when mentioning me!


View Profile WWW
August 08, 2015, 02:45:09 PM
 #7

This is 2 factor authentication right? which has already been confirmed that its going to be included using bitcoin address to sign with. not sure about PGP yet but I would think so

PGP is there. https://docs.google.com/document/d/1bHlm4NQkSzaBTT5tLIqQBmV92wSsbdOX5r-dRR9Dgg0/

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!