3 ms·

Yeah I'm trying to understand the landscape myself. Until I learned about attestation, it seemed like a cool tech and I even spent all morning writing this posi

Yeah I'm trying to understand the landscape myself. Until I learned about attestation, it seemed like a cool tech and I even spent all morning writing this positive blog post about it. I was really disappointed/hurt to read the spec authors openly not caring about user rights. > On the record, I do support whatever mechanisms can be implemented via standards to prevent vendor and platform lock in. It seems like removing the attestation feature from the spec would get us there. > Blog postings stating "Passkeys bad" is the limit of influence available. Yeah. I'm no one special, but I wonder if blog posts from places like the EFF and SFC could get some publicity on the (apparent) fact that Passkeys are an anti-user-freedom technology, just like DRM and TPM are.

toomuchtodo 2y ago
If this is important to you, I would reach out to Senator Wyden's office on the topic [1]. He is a known good advocate of sensible technology policy [2]. Companies do not fear complaints, they fear statute and regulatory requirements. Genuinely wishing you success in your policy advocacy journey on this topic. Pretend you're a lobbyist; you're lobbying for computational freedom gratis. Cory Doctorow might have some helpful advice for you too, his contact info is easy to find. [1] https://www.wyden.senate.gov/ https://www.wyden.senate.gov/ [2] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&query=wyden&sort=byDate&type=story https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
- coldpie 2y ago
  Yeah, thanks. I think most likely I'd start by emailing the spec authors in question, since there's a decent chance you & I are misunderstanding something. Maybe a small tweak (like "services shouldn't reject clients without a really, really good reason, like you're authenticating guards at Fort Knox type stuff") would be sufficient to make this a non-issue.

toomuchtodo 2y ago

If this is important to you, I would reach out to Senator Wyden's office on the topic [1]. He is a known good advocate of sensible technology policy [2]. Companies do not fear complaints, they fear statute and regulatory requirements. Genuinely wishing you success in your policy advocacy journey on this topic. Pretend you're a lobbyist; you're lobbying for computational freedom gratis. Cory Doctorow might have some helpful advice for you too, his contact info is easy to find. [1] https://www.wyden.senate.gov/ https://www.wyden.senate.gov/ [2] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&query=wyden&sort=byDate&type=story https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

coldpie 2y ago
Yeah, thanks. I think most likely I'd start by emailing the spec authors in question, since there's a decent chance you & I are misunderstanding something. Maybe a small tweak (like "services shouldn't reject clients without a really, really good reason, like you're authenticating guards at Fort Knox type stuff") would be sufficient to make this a non-issue.