3 ms·
It’s more than you think: if I can convince you to type in your Google password at g00gl3.com I can turn around and use that password for the real server. Passk
by acdha 2y ago
It’s more than you think: if I can convince you to type in your Google password at g00gl3.com I can turn around and use that password for the real server. Passkeys block that attack.
- happymellon 2y agoSo they couldn't convince everyone to give up their privacy and use Facebook or Google to track our logins to other websites via "Login With", and this is a new way?
- acdha 2y agoIf by new you mean a completely different mechanism which does not share the privacy considerations of a single sign on service, yes. If you care about privacy, passkeys are a much better option.
- stetrain 2y agoWhat's the privacy issue if I use a third-party passkey manager like Bitwarden or 1Password and the passkeys are unique for each website?