2 ms·
until the time comes that it's used for spammers and everyone requires providers from a list that only included apple and Google. y'all trying very hard to not
by 1oooqooq 2y ago
until the time comes that it's used for spammers and everyone requires providers from a list that only included apple and Google.
y'all trying very hard to not see where this will go.
- lxgr 2y agoThis would be possible via attestation, but both Apple and Google removed that feature when they replaced their respective device-bound authenticator implementations with cloud-synchronizing ones. (Google technically still allows creating device-bound ones and supports attestation in that case, but that's arguably a niche use case and not what people are talking about when they say "passkeys".)