Cloudflare Wants to Replace CAPTCHA with Hardware Security Keys

CAPTCHAs are annoying and we all agree that it is one of the worst parts of the modern web. However, the feature is essential to avoid bots and potential spam on online services. To find a middle ground, Cloudflare is exploring the possibility of using hardware security keys as a method to prove you’re a human.

Cloudflare Cryptographic Attestation of Personhood

As per Cloudflare, a user spends at least 32 seconds to complete a CAPTCHA challenge. Assuming that a user comes across a CAPTCHA once every 10 days, that’s roughly 500 human years wasted every single day. To avoid this, the company is proposing what it calls ‘Cryptographic Attestation of Personhood’.

In a recent blog post, Cloudflare has detailed how the technology works. According to the company, users can plug in a hardware security key after clicking on the ‘I am a human’ prompt on supported websites. Soon after, a cryptographic attestation is sent to Cloudflare and the user presence is verified.

When Cloudflare tested this flow, it took just five seconds and three clicks. Cloudflare says you don’t have to worry about privacy concerns since the attestation is not linked to the user’s device. At this moment, the feature supports select security key makers that are part of the FIDO Alliance. Supported devices in the initial rollout include YubiKeys, HyperFIDO keys, and Thetis FIDO U2F keys. If you have a compatible security key, you can test the feature from this website.

“By offering a CAPTCHA alternative via a single touch backed by YubiKey hardware and public key cryptography, Cloudflare’s Cryptographic Attestation of Personhood experiment could help further reduce the cognitive load placed on users as they interact with sites under strain or attack,” said Christopher Harrell, Chief Technology Officer at Yubico.

Cloudflare’s cryptographic attestation of personhood works on devices that support Web Authentication API. The company says it works on all browsers on Windows, macOS, Ubuntu, and iOS 14.5. On the Android side of things, the feature works on Chrome with phones running Android 10 and later.

-by Techtonic Group

Comments

Instagram Parteners with Swiggy, Zomato to Let Resturant Add 'Food Order' Stickers in Stories

Instagram Parteners with Swiggy, Zomato to Let Resturant Add 'Food Order' Stickers in Stories By Techtonic group Instagram recently gave users the option to promote small (and local) businesses by placing a sticker in their Stories. Now, the company has partnered with two of India's renowned food delivery apps - Swiggy and Zomato - to bring a similar feature to the restaurant owners. It has debuted a new 'Food Order' sticker that restaurants can include in their Stories to drive sales. The Coronavirus-led lockdown saw almost all restaurants and eateries shut shop for several days. And even when they opened, netizens have been wary to eat outside or order in due to hygiene concerns. Well, as restaurants open up in line with the WHO safety guidelines, they can now head to Instagram to find a new 'Food Orders' sticker in the Stories section. This new sticker is interactive and will enable users to place food orders simply by tapping on the sa...

Xiaomi Mi True Wireless Earphones 2 To Launch Alongside Mi 10 on 8th May in India

Xiaomi Mi True Wireless Earphones 2 To Launch Alongside Mi 10 on 8th May in India By Techtonic group After multiple delays due to the nationwide lockdown, Xiaomi yesterday announced that its latest flagship smartphone - Mi 10 will launch in India on 8th May later this week. Now, the Chinese giant has taken to Twitter to reveal that it won't be the only product launching that day. Xiaomi uploaded a teaser video on Twitter just moments ago and it reveals that the Mi True Wireless Earphones 2 will launch in India alongside the Mi 10. The company first launched its truly wireless earbuds in China back in September last year, followed by a global launch in Europe in March earlier this year. Mi India ✔ @XiaomiIndia We love the wireless world. Mi fans, we're launching one more product you all have been waiting for, along with # Mi10 on May 8th. Leave your guesses in the comments. RT if you #wirelessfreedom ...

Google Currents' to Replace Google+ for Enterprise Users on July 6

Google Currents' to Replace Google+ for Enterprise Users on July 6 By techtonic group Following the shuttering of Google+ for consumers in 2018, Google announced that the G Suite version of the ill-fated social network will be rebranded as ' Google Currents '. Now, more than a year later, the company has announced that the new service will be officially launched July 6. The 'Currents' branding will also be introduced to the existing Google+ apps on Android and iOS, the company said. In an e-mail to G Suite administrators on Thursday, Google said that existing Google+ enterprise users will be automatically transitioned to the new platform. The new service will reportedly come with an 'updated look and feel'. It will also offer a number of new features, including content moderation and administrative privileges, the company said. It will also carry over some Google+ concepts, like 'tags' and 'streams'. Google Currents has been...

Techtonic

Search This Blog

Sphero Indi Is a Tiny Robotic Car That Helps Children Learn Programming