News for hackers. Stuff that matters.
Re:Introducing passkeys in Chrome by stetrain on Friday December 09, 2022 @12:14AM (#33917751)
Which part of passkeys / Webauthn / FIDO requires a mobile device?
Re:Introducing passkeys in Chrome by p-e-w on Friday December 09, 2022 @12:24AM (#33917824)
In principle, none. In practice, many websites will check the user agent and flat out refuse service unless it's one of a pre-approved list of implementations, regardless of whether it would work or not.

This has been happening for a long, long time already, for many browser features, and such "standards" pushed forward by the major mobile vendors will only make the problem worse.

Re:Introducing passkeys in Chrome by stetrain on Friday December 09, 2022 @12:28AM (#33917843)
Well if we're making up things that websites haven't done yet then yeah I'm angry too.
Re:Introducing passkeys in Chrome by ajvs on Friday December 09, 2022 @12:38AM (#33917916)
Unless you're using one of the proprietary desktop OSes then you have to use one of the proprietary mobile OSes.

https://developers.google.com/identity/passkeys/supported-en...

Re:Introducing passkeys in Chrome by psanford on Friday December 09, 2022 @01:14AM (#33918146)
No you do not need to use anything proprietary to use WebAuthn. There are open source software[0] and hardware keys[1].

[0]: https://github.com/psanford/tpm-fido

[1]: https://solokeys.com/

Re:Introducing passkeys in Chrome by codedokode on Friday December 09, 2022 @02:53AM (#33918793)
WebAuthn supports attestation of key storage and site owners might choose not to trust keys coming from an unknown DIY device.
Re:Introducing passkeys in Chrome by psanford on Friday December 09, 2022 @03:12AM (#33918900)
Fortunately that feature isn't used outside of enterprise environments. Apple's passkeys don't support it so there will not be any mainstream adoption for requiring an attestation cert.
Re:Introducing passkeys in Chrome by stetrain on Friday December 09, 2022 @12:41AM (#33917941)
Assuming desktop Chrome doesn’t support third party password managers like 1Password and Lastpass that are similarly part of the FIDO alliance.

Passkeys aren’t a Chrome feature they’re a Webauthn feature. So if Chrome doesn’t provide the features you want on your platform you should be able to use another browser / password manager combo that does.