3 ms·
This is why WebAuthn is a better solution long-term. It won't work with all sites initially, but the sites it does work with will work consistently, with a dead
by Ajedi32 7y ago
This is why WebAuthn is a better solution long-term. It won't work with all sites initially, but the sites it does work with will work consistently, with a dead simple user experience. No obscure password rules or edge cases where some part of the usual workflow is broken; everything just works.
All we need now is a couple viable first-factor implementations in browsers and major sites, and WebAuthn can start to take over. It's really, really unfortunate that WebAuthn has been a W3C recommendation for almost a year now and yet no major browsers have integrated WebAuthn into their credential sync system so it can actually start to be used as a password alternative.
- cbhl 7y agoAgreed. You use a physical key to unlock your front door, your car, and your bank account. Why not use the same safety model for email and other online websites?