4 ms·
But if you could back up a passkey, wouldn't the key just be a password? (I do agree with you about backups being essential, but my conclusion was "the idea is
by Wowfunhappy 1y ago
But if you could back up a passkey, wouldn't the key just be a password?
(I do agree with you about backups being essential, but my conclusion was "the idea is fundamentally flawed," rather than "it's one tweak away from greatness.")
- burnt-resistor 1y agoThis is the irreducible problem. It's the Emperor's New Clothes™. So either the secrets get generated and stored in tamper-protected hardware, or they are stored somewhere else that can be made portable. For the latter, then they ought to be serializable into some standard form.
- harg 1y agoNo, because unlike a password you never provide the private key for a passkey to the site you’re logging into, which is how many password breaches occur.
- hooverd 1y agoPasskeys solve phishing by being domain bound and never exposing the private key. It's a huge improvement!