3 ms·
This ignores that most password managers check domains/origins the same way browsers do. the only difference is maybe in-app browser where the passkey integrat
by afiori 2y ago
This ignores that most password managers check domains/origins the same way browsers do.
the only difference is maybe in-app browser where the passkey integration might work more easily but even so:
1) it is still a matter of integration and/or using an actual browser
2) in-app browsers are inherently insecure anyway (at least on android)
- acdha 2y ago> This ignores that most password managers check domains/origins the same way browsers do. No, it doesn’t. Most password managers allow you to fill passwords for other domains and all of them allow copy-paste. The people who support those users know that phishers can convince people to do that which is why they’re encouraging adoption of WebAuthn.
- deleted 2y ago[deleted]