4 ms·

I have a degree in computer science, 10 years experience in some complicated fields and I can’t figure out PassKeys. They are woefully designed and implemented

by AJRF 1y ago

I have a degree in computer science, 10 years experience in some complicated fields and I can’t figure out PassKeys. They are woefully designed and implemented, wish we just cut our losses with them and stopped pushing them. Tuck them away in settings, not on the default login path.

sydbarrett74 1y ago
Agree. The UI/UX is atrocious at present. The concept has flaws, but IMO it substantively raises the floor security-wise.
escapecharacter 1y ago
CVS keeps pushing them for their pharmacy login. So annoying.
kjuulh 1y ago
I felt the same when implementing OpenID connect flows according to spec. It uses the browser in creative ways ;) Especially the device flow, absolutely insane complexity for what it is.
tallanvor 1y ago
They're just public/private keypairs that are generated either by a device (whether it's part of you phone, computer, or hardware key), browser, or password manager. I do agree that it can be a bit of a pain when it comes to multiple managers trying to offer to save/respond to a passkey, but otherwise it's a fairly straightforward exchange.
- AJRF 1y ago
  > They're just public/private keypairs that are generated either by a device (whether it's part of you phone, computer, or hardware key), browser, or password manager Now imagine saying that sentence to a person outside tech
  - decimalenough 1y ago
    A monad is just a monoid in the category of endofunctors, what's the problem? Ape holders can use multiple slurp juices on a single ape, so if you have 1 astro ape and 3 slurp juices you can create 3 new apes.
  - fragmede 1y ago
    Why would you give the technical explanation to a person that doesn't want the technical explanation? To the person outside of tech, passkeys are just your phone has a really good password and fills it out for you. Just use that and don't bother having to remember (and forget) another password.
    - AJRF 1y ago
      > To the person outside of tech, passkeys are just your phone has a really good password and fills it out for you Except that is _not_ true, there is an entire thread of people saying they are unintuitive and hard to understand!

by AJRF 1y ago

sydbarrett74 1y ago

Agree. The UI/UX is atrocious at present. The concept has flaws, but IMO it substantively raises the floor security-wise.

escapecharacter 1y ago

CVS keeps pushing them for their pharmacy login. So annoying.

kjuulh 1y ago

I felt the same when implementing OpenID connect flows according to spec. It uses the browser in creative ways ;) Especially the device flow, absolutely insane complexity for what it is.

tallanvor 1y ago

They're just public/private keypairs that are generated either by a device (whether it's part of you phone, computer, or hardware key), browser, or password manager. I do agree that it can be a bit of a pain when it comes to multiple managers trying to offer to save/respond to a passkey, but otherwise it's a fairly straightforward exchange.

AJRF 1y ago
> They're just public/private keypairs that are generated either by a device (whether it's part of you phone, computer, or hardware key), browser, or password manager Now imagine saying that sentence to a person outside tech
- decimalenough 1y ago
  A monad is just a monoid in the category of endofunctors, what's the problem? Ape holders can use multiple slurp juices on a single ape, so if you have 1 astro ape and 3 slurp juices you can create 3 new apes.
- fragmede 1y ago
  Why would you give the technical explanation to a person that doesn't want the technical explanation? To the person outside of tech, passkeys are just your phone has a really good password and fills it out for you. Just use that and don't bother having to remember (and forget) another password.
  - AJRF 1y ago
    > To the person outside of tech, passkeys are just your phone has a really good password and fills it out for you Except that is _not_ true, there is an entire thread of people saying they are unintuitive and hard to understand!