4 ms·
The only reason pass keys are being pushed so heavily is because they are another step in the direction of the customer/user having absolutely zero control over
by perryizgr8 3y ago
The only reason pass keys are being pushed so heavily is because they are another step in the direction of the customer/user having absolutely zero control over the hardware they own, and the software they use. If you doubt this, ask yourself why there's no way to look at your passkey in android? I haven't checked ios but I'll be surprised if it let's you just look at your own passkey.
- WD40ForRust2 3y ago[dead]
- growse 3y agoI can't look at the secret material in my solo usb key either. That's a feature. Do I have "zero control" over it?
- perryizgr8 3y agoYes, pretty much. As the owner you should be able to look at the secret, copy it, publish it, whatever you want. At least with USB keys it is opt in. With passkey I'll be forced to give up my ownership because there are literally no viable options other than Google and Apple for smartphones.
- growse 3y agoThis has a very "technically correct" feel to it, which doesn't actually translate into anything useful in the real world. If you think the very existence of HSMs threatens the concept of "ownership over your hardware", then I guess that's a view. > With passkey I'll be forced to give up my ownership because there are literally no viable options other than Google and Apple for smartphones. Every existing webauthn token is a passkey.
- perryizgr8 3y ago> Every existing webauthn token is a passkey. How to use my existing webauthn token in my iphone as a passkey?
- growse 3y agoI don't have an iPhone, so I've no idea how it works. On my android device, I can plug it in or NFC it. Have you tried plugging it in?