3 ms·
Passkeys aren’t identical with secure enclaves. They can be stored in them, but also in software; even when stored in hardware, they can be marked as extractab
by lxgr 2y ago
Passkeys aren’t identical with secure enclaves.
They can be stored in them, but also in software; even when stored in hardware, they can be marked as extractable to some trusted party (a companion device with the same root of trust, a trusted cloud sync service, a supply chain attacker etc.)
- taeric 2y agoFair, but if the secret is exportable, then it loses a ton of its power. If you are worried about state level activity, have it stored in a single place that can be compelled by law to disclose it and that is off the table for you. Which, sure, you can argue that there are still hardware tokens for people. But that is itself a signal, no?