4 ms·
Certificates are awesome on paper (I’m a big fan of WebAuth for example) but we need some sort of custodianship for less technical users who don’t realize that
by edude03 5y ago
Certificates are awesome on paper (I’m a big fan of WebAuth for example) but we need some sort of custodianship for less technical users who don’t realize that formatting their laptop means they might not be able to log into their services again
- supertrope 5y agoYep. Microsoft lets users upload their drive encryption keys to their Microsoft account. Then the account is pegged to SMS, Microsoft Authenticator, or (best) a FIDO key. The problem is what happens when they lose the key. Falling back to SMS lowers security to social engineering your phone company.
- dwaite 5y agoApple has a tech preview of something they call PassKeys - WebAuthn credentials which are in the same keychain as the system password manager, synchronized between all your devices. This requires other changes to meet the needs of those who expect and require the behavior of credentials bound to a single device, hence being released in an early access form behind a developer toggle.