Typing a password slows you down, so now you'll need to enter a 2fa and a password. Fucking brilliant!

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 1 day ago* (1 child)

Too many services don't allow multiple passkeys per account. If they are supposed to be device level attestation, you need to be able to enroll one per device. I know that there are some frameworks to connect an enrolled device to attest, but that a) plain doesn't work well for some configs, and b) is annoying. I understand having a hardware security key for some stuff, but I feel like having that be a random ass phone for most people isn't really that desirable.

I feel like syncable passkeys are a band aid on top of most services having no idea how to implement passkeys well.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 day ago

    That's good to know, I've honestly been avoiding them as I find the rollout and concept from to be questionable at best.

    Given those issues I'll be curious to see if passkeys keep up their momentum. It sounds a lot like a solution that solves some problems while creating other problems.

  • source
  • parent