Recent content by Paul F

That is a very important point. If you rekey two devices separately then each device causes a different website to rekey to it, it will take major surgery on the identity files with the help of a SQRLmeister to fix things. And if it can happen it will happen.

Sorry, which "that" are you referring to?

Thanks for your response. What's important is that "externally" clients and servers interact the same way. The three status bits: IDK Match PIDK Match and SQRL Disabled are contentious ones. In response to a Query command, they have to be correct for the client to know how to proceed. In...

The SQRL Spec describes the TIF bits but does not establish a standard way to create or interpret the composite tif=value in the protocol. I have made a flowchart based on GRC's reference SSP API that SQRL servers can follow to create compatible TIF values, and clients can use to parse them. I...

It is deliberately omitted: http://www.GRC.com/groups/sqrl:7034

This newsgroup message may be relevant to this discussion: http://www.GRC.com/groups/sqrl:16004

There is a preliminary Linux "C" translation of Steve's SSP API described here: https://www.grc.com/sqrl/sspapi.htm if that interests you.

Here's something from the newsgroup that might help. http://www.GRC.com/groups/sqrl:14308

@kalaspuffar 1. On a login, the server returns tif=5 for cmd=query, correctly indicating an identity match. On the subsequent cmd=ident, the user is logged in but the server returns tif=4. It should return tif=5. 2. The server's sin=0 parameter is missing its \r\n.

If there is an x=n path extension it needs to be included in the qry= parameter of the server's response.

The SQRL login appears to be missing the content length in its responses. Content Length is being reported as 0 or -1.

Um... and how would you go about checking a portion of the rescue code?

As it happens the SQRL protocol doesn't require a password. That's an implementation option for the client. The password can be null. If you want to remove the password from your identity file you can use this program https://fil.email/PDHVzb36 . It will be hosted there for 7 days. Select...

Right-click on the SQRL "tray" icon. Select Manage SQRL. Select Backup / Export Identity. Select Store In File. Save to a USB Thumb Drive. It's known behaviour, see http://www.GRC.com/groups/sqrl:16946 . The file itself is not locked and can be deleted, but the USB is still 'in use'. The USB...

If you know how to modify the Windows Registry you can disable screen darkening by resetting bit 0 of the registry value at HKCU\Software\Gibson Research\SQRL OptionSettings. i.e. subtract 1 from its current value. Addendum: This takes effect only after exitting and restarting the SQRL client.