News for hackers. Stuff that matters.

A comment on Passkeys are great but it does not solve an important problem. Parent comment

Re:Passkeys are great but it does not solve an important pro... by aborsy on Thursday September 08, 2022 @03:50PM (#32771089)
Apple doesn’t copy over your private key, if you don’t have something interesting. But if you do have something interesting, then governments could ask, I request that you copy over the private keys for these individuals with 2 weeks, and not disclose this request. Of course, iOS is closed source and users will never know.

It’s access on demand when needed. It can be done with or without passkeys, but the statements that Apple doesn’t have your passkey is inaccurate.

[ Parent | on HN ]
Re:Passkeys are great but it does not solve an important pro... by zimpenfish on Thursday September 08, 2022 @03:55PM (#32771157)
> governments could ask, I request that you copy over the private keys for these individuals

I don't believe that's possible because the secret key for Keychain lives in the Secure Enclave and is never exposed outside of that processor[1].

[1] https://developer.apple.com/documentation/security/certifica...

[ Parent | on HN ]
Re:Passkeys are great but it does not solve an important pro... by aborsy on Thursday September 08, 2022 @04:35PM (#32771724)
Details are yet to be seen, but note:

>> Once created, the passkey can be stored in iCloud’s Keychain and synced across multiple devices—meaning your passkeys will be available on your iPad and MacBook without any extra work.

So apparently you can transfer a passkey from device to device through cloud.

[ Parent | on HN ]