Re:Ask HN: Why is WebAuthn so slow to take off?
by drexlspivey on Sunday April 23, 2023 @12:07PM
(#35677435)
Even if they snatch it unlocked they still can’t login because there’s an extra biometrics check required for WebAuthn
[ Parent
| on HN ]
Re:Ask HN: Why is WebAuthn so slow to take off?
by SgtBastard on Monday April 24, 2023 @11:06PM
(#35696103)
In at least Apple's case, Device PIN is also a factor to unlock the secure enclave where the passkeys are kept - so, assuming there's no stronger enforcement that it must use FaceID/TouchID, shoulder surfing a PIN unlock of the device and then swiping it grants access to all accounts.