4 ms·
Passkeys are an open standard with multiple implementations. It represents the opposite of the trend you're worried about there.
by AgentME 3y ago
Passkeys are an open standard with multiple implementations. It represents the opposite of the trend you're worried about there.
- thayne 3y agoBut the way it is designed, you can require a certain provider, and you can bet at least some sites will start requiring attestation from Google and or Apple.
- nmadden 3y agoDo they do attestation by default? I thought for Apple at least that was only a feature for enterprise managed devices (MDM). Attestation is also a registration-time check, so doesn’t necessarily constrain where the passkey is synced to later on.
- tux3 3y agoMS Azure Active Entra's FIDO2 implementation only allows a select list of vendors. You need a certification from FIDO ($,$$$), you need to have an account that can upload on the MDS metadata service, and you need to talk to MS to see if they'll consider adding you to the list It's not completely closed, but in practice no one on that list is a small independent open source project, those are all the kind of entrenched corporate security companies you'd expect
- endgame 3y agoBecause that worked so well for OpenID. If you're lucky, you have the choice of which BigTech account you can use.