HaraldvonBlauzahn@feddit.org to Linux@lemmy.mlEnglish · 13 hours agoPasskeys are a trap. Do not use them.nonfunctional.substack.comexternal-linkmessage-square38linkfedilinkarrow-up173arrow-down132cross-posted to: hackernews@lemmy.bestiver.se
arrow-up141arrow-down1external-linkPasskeys are a trap. Do not use them.nonfunctional.substack.comHaraldvonBlauzahn@feddit.org to Linux@lemmy.mlEnglish · 13 hours agomessage-square38linkfedilinkcross-posted to: hackernews@lemmy.bestiver.se
minus-squareHaraldvonBlauzahn@feddit.orgOPlinkfedilinkarrow-up1·edit-25 hours ago Passkeys big bonus is that they are far more phish-resistant than pretty much any other MFA out there. So, what is actually the threat model? And does it justify to take away user’s control over keys?
So, what is actually the threat model? And does it justify to take away user’s control over keys?