4 ms·
physical keys, the equivalent of passwords, have been working for millenia and will keep working in the future, despite their limits, which present a good trade
by peoplefromibiza 4y ago
physical keys, the equivalent of passwords, have been working for millenia and will keep working in the future, despite their limits, which present a good trade off generally speaking.
everything biometric is scary as hell, I can't change my fingerprints.
everything involving cryptographic keys has the same problem: if someone get ahold of my keys, I'm f*cked.
if I need a device to be close to me, the solution is not as bullet proof as they make it sound.
we all know nobody ever loses their devices or forgets them on the train, they never get stolen, they never break or suddenly stop working.
They also admit that
Passkeys aren’t reused across sites like passwords often are, so stolen credentials do less damage
or
It sounds simple enough, but in my experience, I’ve found that the process can be confusing. When I attempted to test it by creating a Kayak account, I repeatedly got stuck waiting for a verification email that never showed up. Eventually, I managed to log in, and the passkey worked seamlessly on an iPhone. But when I tried to create a passkey on my Mac, I was locked in a loop where the site repeatedly asked me to enter my email address; I soon realized that I had to select the option to scan a QR code with my phone because my Mac mini doesn’t have Face ID or Touch ID, and I needed to authenticate on a device that does. At no point in the login process was that made clear.
so, yeah, thanks, no thanks.
- ehutch79 4y agoPasskeys absolutely do not need an email.