28 ms·

> It's tied to vendor lock in If you're referring to the inability to transfer passkeys across systems, that should be improving soon. https://blog.1password.

by re 1y ago

> It's tied to vendor lock in If you're referring to the inability to transfer passkeys across systems, that should be improving soon. https://blog.1password.com/fido-alliance-import-export-passkeys-draft-specs/ https://blog.1password.com/fido-alliance-import-export-passk... https://arstechnica.com/security/2025/06/apple-previews-new-import-export-feature-to-make-passkeys-more-interoperable/ https://arstechnica.com/security/2025/06/apple-previews-new-...

ls612 1y ago
As long as the passkey spec includes remote snitching (attestation) your keepass open source alternative will exist only because big tech allows it, and it will end when big tech demands it. The entire import/export standard is a red herring.
- rantallion 1y ago
  On one side of the pond, we have the EU's Digital Markets Act to protect consumers. It has teeth and it's already being used to ensure consumers have choice.
  - zombot 1y ago
    But only in the EU. You can already see iOS behave differently depending on which side of the pond you're from.
  - holowoodman 1y ago
    Not so sure that EU bureaucrats will understand and fix that problem. With NIS2, they let the IT-security-crapware lobby dictate draconian and mostly stupid security laws. Could be that the security-paranoid part of the bureaucracy overrides the consumer protection part in that case.
- ortekk 1y ago
  It's sort of happening already. Members of FIDO threatening to block KeepassXC users [0] from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation [0] https://github.com/keepassxreboot/keepassxc/issues/10407#issuecomment-1994182200 https://github.com/keepassxreboot/keepassxc/issues/10407#iss...
dspillett 1y ago
> that should be improving soon Then _soon_ I might reconsider using passkeys. I'm not making changes to my security workflows now based on promises that the lock-in potential will be reduced as some unspecific point in the future.

by re 1y ago

ls612 1y ago

As long as the passkey spec includes remote snitching (attestation) your keepass open source alternative will exist only because big tech allows it, and it will end when big tech demands it. The entire import/export standard is a red herring.

rantallion 1y ago
On one side of the pond, we have the EU's Digital Markets Act to protect consumers. It has teeth and it's already being used to ensure consumers have choice.
- zombot 1y ago
  But only in the EU. You can already see iOS behave differently depending on which side of the pond you're from.
- holowoodman 1y ago
  Not so sure that EU bureaucrats will understand and fix that problem. With NIS2, they let the IT-security-crapware lobby dictate draconian and mostly stupid security laws. Could be that the security-paranoid part of the bureaucracy overrides the consumer protection part in that case.
ortekk 1y ago
It's sort of happening already. Members of FIDO threatening to block KeepassXC users [0] from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation [0] https://github.com/keepassxreboot/keepassxc/issues/10407#issuecomment-1994182200 https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

dspillett 1y ago

> that should be improving soon Then _soon_ I might reconsider using passkeys. I'm not making changes to my security workflows now based on promises that the lock-in potential will be reduced as some unspecific point in the future.