News for hackers. Stuff that matters.
Re:Simple passwordless authentication for web projects by kevincox on Tuesday February 22, 2022 @12:52PM (#30431007)
Maybe I haven't seen a good implementation but I wouldn't say WebAuthn works. I have yet to seen a version that syncs across devices which is a fundamental requirement for me. I'm also not sure how I can type in a WebAuthn credential to someone else's computer or how I can memorize it so that I can use it when I am away from my phone+computer.

Both approaches clearly have gaps right now, all I am saying is that long term I think the password+PAKE looks more promising than what WebAuthn offers.

There are no comments on this comment yet.