back

by Tomte·12y ago·view on hn ↗
It's a really neat idea, though I'm not a big fan of having it as a browser extension.

Two observations:

1. Password strength is really, really important now, since it is deterministically transformed into your key pair. It's not like the passphrase for a GnuPG key where you'd have to steal the private key in the first place, in order to do something evil with the recovered weak passphrase.

2. There's another big caveat re: password. In most systems that we know it doesn't matter if you have a non-unique password, as long as it's not guessable. In this scheme your identity will be merged with everyone else who has thought of the same password.