News for hackers. Stuff that matters.

A comment on Apple Passkey. Parent comment

Re:Apple Passkey by teeray on Monday June 06, 2022 @02:41PM (#31644102)
Plus, password managers have fantastic backwards compatibility even on old, crufty sites that will never be updated.

We really should be working to allow better, standardized integration with password managers (communicating password length and alphabet requirements, well-known URIs to do zero-touch credential rotation, etc.) rather than trying to do "Log in with BIGCORP" in another way.

[ Parent | on HN ]
Re:Apple Passkey by realityking on Monday June 06, 2022 @03:29PM (#31644900)
There are some efforts to make things easier for password manager. E.g. differentiation new password, old password and 2FA token fields: https://developer.apple.com/documentation/security/password_...

I believe some password managers also look at the regex attribute to understand required or disallowed characters.

For resetting passwords there‘s at least a way to deep link to the right page: https://web.dev/change-password-url/

[ Parent | on HN ]