On: Passkeys: A shattered dream

[jasonjayr]

... and they are getting warned about that feature existing: https://news.ycombinator.com/item?id=39698502

[diggernet → jasonjayr]

with an excellent response to that warning here: https://news.ycombinator.com/item?id=39706876

[sunshowers → diggernet]

Thank you for posting this comment. I'm saddened but not surprised that attestation is being seriously talked about as a way to get independent password managers in line but not large corporations, and completely agree with Dan there.

[jasonjayr → diggernet]

Yep, I agree with that response completely. That whole thread is a great read about the reality of the passkey situation, and what it will take to really make it great.

[fbdab103 → jasonjayr]

The entire passkey situation is pretty telling that the spec was created with just vague promises that export would be handled at a later date.