3 ms·
That's all it does.
by chipsrafferty 1y ago
That's all it does.
- 01HNNWZ0MV43FF 1y agoThis "passkey" business has been so confusing. I have had an HSM for years. I thought "Passkey" was that stupid Windows thing where they want you to use a 4-digit or 5-digit PIN. If a "passkey" means an HSM, I'm already onboard. If it means PINs and TPMs, I'm not onboard
- esseph 1y agoHSM can store a passkey that you optionally can use a touch + pin/password to unlock.
- dingaling 1y agoPasskey is a catchy but vague name for ssh keys used for website auth. Everything else about them, such as HSM, is industry overlay motivated by their own motivations and aspirations.
- astrange 1y agoA TPM is an HSM.
- sam_lowry_ 1y agoNope, TPM secures your computer from you. HSM offloads sensitive tasks to a trusted device while letting you fiddle with the computer any way you want.
- astrange 1y agoAn HSM stores private keys securely. A TPM does this to implement secure boot and disk encryption. And for some reason a lot of people are afraid of disk encryption.
- sam_lowry_ 1y ago> And for some reason a lot of people are afraid of disk encryption. I can answer that. Disk encryption is a risk factor. If my desktop fails and it is unencrypted, I can take the disk and put it into another desktop and it will work. With encryption, I am less sure. I do encrypt my desktop with LUKS but I vaguely remember that setting up an encrypted disk in Linux is tricky, there is a loop device involved for the decryption layer, some LVM config. And the kernel has to support all that, which it probably does, but again. It's been a long time since I tried. So while my desktop and my laptops have encrypted partitions, the server running my archives and backup is not, because I value simplicity and access more than the extra security. People using Windows or Apple hardware should be even more afraid of disk encryption, as they understand it way less than me.