3 ms·
I'm never using this unless I'm in control of the certs and where they're stored. This if a fragile solution to the issue of password reuse and bad security pra
by account-5 3y ago
I'm never using this unless I'm in control of the certs and where they're stored. This if a fragile solution to the issue of password reuse and bad security practices from vendors.
- judge2020 3y agoPasskeys don't send the hardware identifier or anything else to the service when you authenticate with them - all they see is a signature and a public key with no authority/signing chain or anything. So you can very well create software passkey implementations and whatnot, or use something like a Yubikey for your passkey storage.
- account-5 3y agoMy personal preference is for it not to be tied to a device that can be lost, stolen, broken. That way I don't need multiple backup devices to login to one service. My password manager generates unique strong passwords, is offline and no big multinational advertising company controls it. The only thing I need to worry about is individual companies security practices. Passkeys offer me nothing of an improvement over this and only more obstacles and hoops to jump through. Until I can use passkeys like I can my password manager I'm not using them