3 ms·
This seems like just a rant from someone who doesn't provide any grounds, argumentation or information about supposed security flaw. What's the value of posting
by izacus 3y ago
This seems like just a rant from someone who doesn't provide any grounds, argumentation or information about supposed security flaw. What's the value of posting this?
It's even fundamentally misguided - passkeys behave the same as random passwords stored in a password managers (they're... pretty much the same without the copy/pasting). What's the flaw here?
- croes 3y agoCan you switch the manager of your passkeys, for instance if you switch from Android to iOS or vice versa? Last time I checked it wasn't possible, but that's 5 months ago. And don't forget passwords are protected by the fifth Amendment, biometrics aren't.
- quenix 3y agoI agree with you. The only thing I can find is that the author alludes to the fact passkey auth relies "completely on device authentication security which for many users is extremely weak" ... but you need physical access to the device too. Plus, for most modern devices with TPM-like ICs, it's probably more secure than a PC with a password manager?