3 ms·
> at which point it’s no different to password syncing You still get the phishing resistance, though!
by crote 3mo ago
> at which point it’s no different to password syncing
You still get the phishing resistance, though!
- choo-t 3mo agoPassword managers prevent phishing as they check for the domain name before inputing the password.
- jesseendahl 3mo agoPassword managers do not architecturally, cryptographically make phishing impossible. Ultimately a user can still be tricked to copy/paste their passwords into fake websites, even when using a password manager. You could blame end-users for this behavior, but attackers don't care about blame. Ultimately, it doesn't matter who's at fault when there are massive phishing attacks happening at scale every single hour of every day. The only real solution to solve this problem for the entire internet is to make credentials architecturally, cryptographically unphishable by design. That's what passkeys give you.
- TeMPOraL 3mo agoIs the "phishing resistance" just inability to view and manage your own data? That's a bug, not a feature then.
- coffe2mug 3mo agoDownloading and keeping safe local data is a bug for others