5 ms·
Passkey does not appear to be a well defined term - more a marketing term - but you cannot disconnect the concept from FIDO/WebAuthn. There is no way to use a “
by lll-o-lll 3y ago
Passkey does not appear to be a well defined term - more a marketing term - but you cannot disconnect the concept from FIDO/WebAuthn. There is no way to use a “passkey” without using the WebAuthn protocol, and hence “User Verification” is an available option and hence it’s reasonable to assert that passkeys support MFA.
So, if I am a site that needs additional verification (previously used MFA), I use “User Verification” == “required”. Then I know two factors “something the user has” and “something the user knows/is” has been used.
- lazide 3y agoExcept it actually is well defined, and has a specific standard of what it actually means? https://fidoalliance.org/passkeys/ https://fidoalliance.org/passkeys/ But whatever.
- lll-o-lll 3y agoBut you agree with the rest of my statement and therefore that you were in error?
- lazide 3y agoHahaha, you need to learn to read man. There is literally nothing you added that wasn’t already there. So no. But you’ve been very verbose in looking like an idiot though. So have fun with that?