3 ms·
Thanks for writing this, I've been complaining and trying to get attention on this problem for somewhere close to a year and I feel like with so much of the com
by danShumway 3y ago
Thanks for writing this, I've been complaining and trying to get attention on this problem for somewhere close to a year and I feel like with so much of the completely uncritical coverage of passkeys I was disconnected from reality or something.
Portability is a huge issue for passkeys and the lack of communication about it as well as the lack of prioritization is holding passkeys back.
----
A few weeks ago there was a virtual tech summit for the FIDO alliance which had a tech-talk on the state of portability: https://www.youtube.com/watch?v=Mje6J2IMRTY https://www.youtube.com/watch?v=Mje6J2IMRTY
It is from what I can tell the only resource going over plans for portability to this level of detail. I'm hugely grateful to the presenters who even went out of their way to answer a few of my questions when I emailed them -- seriously, thank you.
But it's frustrating to have questions about portability years after passkeys became a thing and to have a 30 minute video be the best resource online for learning more. Hopefully that will change in the future, my understanding is that a rough draft spec is coming soon. But the process up until this point has been frustratingly vague and impossible to follow from the outside, and I'm still left asking why portability wasn't considered a pre-condition to launching passkeys and advertising them to ordinary users for regular usage.
I'm hoping things get better once the draft spec is released, I want to be wrong about passkeys. I want them to be something I can support and advocate for. It's because passkeys have so much potential that it's frustrating seeing them fall over in this way, and it's frustrating to see trends that make me feel like the entire standard is being developed mostly by companies without the kind of serious input from user-advocates or transparency about spec process that is necessary for a full password replacement.
- protonpass 3y agoYou can already export and reimportant passkeys in Proton Pass and as soon as an industry-wide export format is standardized, we'll support that too.
- danShumway 3y agoKeepassXC too, and I think Strongbox(?) is trying to support interop with 3rd-parties -- if anyone from Strongbox is around, you should add support for Proton Pass's format. That's been the encouraging part in this -- 3rd-party passkey providers stepping up and saying that export/interop is important to them and that they're not going to launch without it regardless of where the standard currently is -- so again, thanks for taking that stance :)