3 ms·

There is a large section on privacy in the spec. https://www.w3.org/TR/webauthn-2/#sctn-privacy-considerations https://www.w3.org/TR/webauthn-2/#sctn-privacy-c

There is a large section on privacy in the spec. https://www.w3.org/TR/webauthn-2/#sctn-privacy-considerations https://www.w3.org/TR/webauthn-2/#sctn-privacy-consideration... However Passkeys puts apple in a position of the Authenticator which is the riskiest part in terms of privacy.

tjoff 4y ago
Thank you, seems quite approachable. A different authenticator is paramount but the question is how secure and private a self-hosted solution can be, with reasonable effort.