4 ms·
Ex-Googler, laid off, so no allegiance. It's not a proprietary development. The intention to use private keys for authentication goes all the way back to the K
by cromwellian 3y ago
Ex-Googler, laid off, so no allegiance.
It's not a proprietary development. The intention to use private keys for authentication goes all the way back to the KEYGEN tag in HTML. WebAuthn started from FIDO, not Google, and FIDO Alliance was started in 2012 by PayPal, Lenovo, and others, not Google, Apple, etc. Google joined in 2013, and they were mostly interested in 2FA at that point. And prior to that, when I worked at IBM TJ Watson in the 90s on some of the first TPMs, we were developing passkey equivalents using public key crypto for login and digital signatures on ThinkPads and RS/6000 workstations.
This work, desire to use public key crypto for authentication, goes back A LONG time practically before the internet was taken over by corporations.
This is a good thing for the public. Passwords suck. The number of people who have been pwn3d and phished due to passwords is insane, they're user hostile in so many ways "It would be a totally different situation if customers were actually interested in a particular solution", are customers actually interested in constantly logging in with password and SMS codes -- the default today. Does anyone love using authenticators, or Apple 2FA popups, security keys?
- garganzol 3y agoThank you for sharing the historical context. So, I have to wear off my tin foil hat, at least for today.