4 ms·
> The ability to share passkeys across vendors, including the ability to implement a "sync fabric" as some folks in the WebAuthn working group have called it, s
by dwaite 4y ago
> The ability to share passkeys across vendors, including the ability to implement a "sync fabric" as some folks in the WebAuthn working group have called it, so it's interoperable beyond the major vendors.
This is a bit of a new challenge, because websites that consume authentication sometimes need to be able to reason about that authentication's strengths and risks. The models we use for this today, built around countering risks through multiple factors, are not set up to map to these new credentials which are abstracted by software and don't represent a single of the factors strongly.
It may be better to have third party sync fabrics that are cross platform, like a 1Password or Lastpass or Bitwarden, and indicate this so that the quality of the authentication can be reasoned about.