4 ms·
> a forum full of tech people bitching about something that's more secure and more convenient I don't trust a cloud vendor to own my entire digital life, and I
by coldpie 2y ago
> a forum full of tech people bitching about something that's more secure and more convenient
I don't trust a cloud vendor to own my entire digital life, and I don't want to have to stand up and maintain my own super complex self-hosted passkey service. Passwords are easy, just stuff them in an encrypted text file. I have no idea how to self-manage passkeys.
- int_19h 2y agoWith iOS, at least, you just backup your phone (locally, no need for iCloud).
- coldpie 2y agoThat still means I have to depend on Apple to get access to my services, no?
- acdha 2y agoYour keys are synchronized locally. You’re depending on apple to activate new devices.
- coldpie 2y agoHmm, let me try to put this another way: how can I use passkeys such that at no point does my login go through a third party in between me and the service I'm trying to use?
- acdha 2y agoThat’s literally how passkeys work: your computer communicates to the remote server with no intermediaries.
- coldpie 2y agoThen why is everyone talking about phones? https://news.ycombinator.com/item?id=42444246 https://news.ycombinator.com/item?id=42444246 You also said above Apple is involved with a new device or something.
- acdha 2y agoThat’s what happens if you need to login from a device which doesn’t have your passkey on it: that device displays the QR code and you scan it with your phone and approve the request. Still no third parties between you and the remote server.
- coldpie 2y agoOkay. How do I get a passkey on a device? Say if I'm using Firefox on Linux.
- acdha 2y agoBy consulting the documentation? https://bitwarden.com/passwordless-passkeys/ https://bitwarden.com/passwordless-passkeys/ https://support.1password.com/save-use-passkeys/ https://support.1password.com/save-use-passkeys/
- coldpie 2y agoOh nice, thanks!! That Bitwarden link is exactly what I wanted to see. Open source software, no services to run, no cloud providers or phones involved. That's a much better process than all the weird phone stuff people are talking about all over this thread.
- acdha 2y agoYeah, the phone stuff is really an edge case for people using something like a work device to access a person account. I’ve tested it but almost never use it.