
The FIDO Alliance recently published a white paper about its plan to replace passwords. Coverage about this paper from Wired and The Register is excellent, and the white paper itself provides some interesting solutions for eliminating the need for passwords. FIDO proposes using secondary Bluetooth enabled devices to transmit cryptographic keys locally, without data being shared over the Internet. Such an implementation would be phishing-resistant, but is its adoption realistic?