4 ms·
So I was trying to figure this out, but basically passkeys are a private-public key pair as opposed to passwords that are a shared secret? And I guess authenti
by rendaw 3y ago
So I was trying to figure this out, but basically passkeys are a private-public key pair as opposed to passwords that are a shared secret? And I guess authenticating with a passkey is basically doing a signature or some other proof that doesn't expose the private key.
Since passkeys are generated using an algorithm, there's no risk of people reusing them or choosing weak ones (and will force people to use password managers).
And at the root you still have a shared secret password/pin to unlock your password manager or device containing the password manager.
- znpy 3y agoSo basically are user certificates being reinvented here?