Authentication is Broken. Can We Try Fix It?
summary
Proposes replacing passwords by storing xpubs instead of passwords and having users sign derivation-path challenges derived from hardened HD keys (BIP39/BIP32 style); demoed a Node.js proof‑of‑concept website that generates 12‑word mnemonics, emits hardened xpubs, produces single‑use derivation paths, accepts signatures and verifies them server‑side. Shows server xpubs for mutual authentication, suggests Tor onion v4 binding, and reports the PoC works end‑to‑end for registration and challenge‑response.
AI-written summary · about
chapters (14)
- 0:00Introduction to broken auth
- 1:11Cryptography as information bending
- 3:00Bitcoin and HD key derivation
- 6:33Demo of HD authentication
- 16:49Eight reasons for HD auth
- 20:24Crypto wallets as auth tools
- 21:54Problem with trusted third parties
- 22:36Onion addresses and HD keys
- 24:24Federated HD authentication
- 26:25Signing social media posts
- 29:25Password hashing risks
- 30:32Quantum computing threat
- 31:13Resources and code demo
- 33:21Q&A and key management
