5 ms·
Like 99% of people in this thread, you are conflating distributed non-device-bound credentials (passkeys) with hardware security keys.
by dvzk 3y ago
Like 99% of people in this thread, you are conflating distributed non-device-bound credentials (passkeys) with hardware security keys.
- donmcronald 3y ago> distributed non-device-bound credentials If they can be distributed they can be stolen, right? I don't see how it's any better than a password manager at that point.
- dvzk 3y agoYes. Depending on the threat model, it may or may not be better. Many organizations won't be allowing remote passkey sign-in for employees. For people at home, the elimination of passwords will reduce rates of phishing and credential-stuffing attacks.