3 ms·
Passkeys are what client TLS certificates should have been from the beginning in terms of ease of use if web browsers wanted to fix the UX around them. But als
by quectophoton 3y ago
Passkeys are what client TLS certificates should have been from the beginning in terms of ease of use if web browsers wanted to fix the UX around them.
But also a random company decides, in a closed source way, what your secret is, and you trust them. So key derivation, signing, and that stuff depends on this detail that the random company decided for you (though some closed-hardware devices allow you to generate them on the closed-hardware devices themselves).
If I am wrong, I would love to be corrected.
- fuzztester 3y agoThanks for the reply.
- WorldMaker 3y agoIt's not really a "random" company, it is a company that you choose or have some other working relationship with. Most people are likely going to let that be the company they buy their most personal computer from (their "phone"), but those aren't the only choices. Open-source options exist if you don't trust the companies (but as with most things open source generally have harder UX and sharper learning curves). (If you do trust companies and want to avoid The Big Three: 1Password is a choice today. BitWarden is a choice "tomorrow" or otherwise soon. More options will likely come.)