2 ms·
... which is completely nonviable if you connect to more than a single service. I agree that you should use a different key per device, but when you connect to
by crote 3y ago
... which is completely nonviable if you connect to more than a single service.
I agree that you should use a different key per device, but when you connect to over a dozen different services/machines it quickly starts to become a serious chore to add another key. Have fun spending an hour enrolling your new device - provided you can even remember every single usage it should be enrolled with.
- 4ad 3y agoSSH certificates solve this issue. AFAIK there is no equivalent for Passkeys.
- crote 3y agoUnfortunately SSH certificates have really poor uptake in practice, and it's essentially unheard of to have a personal CA instead of a per-company CA. But yes, having a single long-living "primary key" everyone can trust which you'd use to generate short-living per-device "secondary keys" would indeed be the ideal solution.