> A number of these FIDO posts are cropping up and I still don't really get it. Someone in a previous one explained the benefits over and above my current passw

> A number of these FIDO posts are cropping up and I still don't really get it. Someone in a previous one explained the benefits over and above my current password manager set up. This post and the last one[0] are the same exact statement, this one was just posted again. > It seems to me a centralised single point of weakness open to exploitation from the multi national corps. IMO this is mostly a misunderstanding, the proposal is a commitment to implementing a host of features to make regular users actually consider using security keys: - Apple and Google are implementing a syncing security key service, likely on top of their existing password manager infrastructure [iCloud Keychain[1,2] on Apple devices] - They are also committing to wireless Webauthn-over-BLE technology, so you can do things like scanning a QR Code on your Windows desktop to sign in with a security key stored in your iCloud Keychain Otherwise, these concerns of control have existed for nearly a decade with Sign in with Google[3]. Now they're making it more secure by not having a third-party as the actual broker between the user and the service provider, they just assist in the UX department. 0: https://news.ycombinator.com/item?id=31272867 https://news.ycombinator.com/item?id=31272867 1: https://photos.google.com/share/AF1QipNNgpbkj1r58PsJK_RHlsfAu7NdjZkO2CTosBbEWPzzdP726W0dRgfFfqk_ruSeIQ?key=aUNBQzFOY1l6SG9CTmloTEJtNWZoSHUyV0tibnJ3 https://photos.google.com/share/AF1QipNNgpbkj1r58PsJK_RHlsfA... 2: https://developer.apple.com/documentation/authenticationservices/public-private_key_authentication/supporting_passkeys https://developer.apple.com/documentation/authenticationserv... 3: http://googleplusplatform.blogspot.com/2013/02/google-plus-sign-in.html http://googleplusplatform.blogspot.com/2013/02/google-plus-s...