Crossposted from https://feddit.org/post/36692057

A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 weeks ago

I agree 100%, this post is not a full rebuttal and does not tackle the concerns directly:

  • The character of the organisations in FIDO does not inspire confidence against lock-in or monopolistic behaviour
  • The possibility of future attestation cutting out those on 'unapproved' software and hardware.

I agree parts of the tech are good, particularly the anti-phishing, anti-replay measures.

This post seems to say passkeys are in good hands so nothing can go wrong, but I don't think that's enough.

  • source
  • parent