3 ms·
Apple does precisely this for Apple account, you need to have a hardware attested passkey implementation to authenticate using passkey. Edit: forgot to add App
by commandersaki 1y ago
Apple does precisely this for Apple account, you need to have a hardware attested passkey implementation to authenticate using passkey.
Edit: forgot to add Apple account
- FreakLegion 1y agoTo authenticate to what? I have a few dozen people using passkeys on macOS without attestation, but I'll admit none of them are logging into "Apple".
- FreakLegion 1y agoTo your edit: I suppose this is strictly true, but it's relevant that Apple's own devices satisfy the attested hardware requirement. These are the same devices you need to have a full-fledged Apple account in the first place. That's more Apple doing Apple things than anything to do with passkeys, but it is indeed an example of not being able to use KeyPassXC. Will there be more than epsilon cases like that? I still don't think so, for what seem like obvious market reasons.
- commandersaki 1y agoWill there be more than epsilon cases like that? I anticipate banks, enterprise sso login, etc. doing this.