Skip to content

Comment on Pass the Passkey: A Novel Attack Surface in Passwordless Authenticationparent

Comments

Why is a password manager a "service" it should really just be a program

"Okay, my password manager is now a program. Oh no, program won't run. Not sure why!"

"Glad I have these physical passkeys! Also helps with those airgapped servers at work!"

I'm not against physical keys at all. I have one on my keychain. I'm against making things hard to maintain ourselves. Being dependent on Apple and Google to agree before we can own our own keys is what bothers me.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.