4 ms·

It certainly can.

• 1oooqooq 2y ago
  until the time comes that it's used for spammers and everyone requires providers from a list that only included apple and Google. y'all trying very hard to not see where this will go.
  • lxgr 2y ago
    This would be possible via attestation, but both Apple and Google removed that feature when they replaced their respective device-bound authenticator implementations with cloud-synchronizing ones. (Google technically still allows creating device-bound ones and supports attestation in that case, but that's arguably a niche use case and not what people are talking about when they say "passkeys".)