Re:Passkeys: The Beginning of the End of the Password
by flippinburgers on Thursday May 04, 2023 @08:39AM
(#35814330)
Unless there is proof that the hardware on the phone is isolated specifically for this task you cannot make the claim that google is unable to MITM.
[ Parent
| on HN ]
Re:Passkeys: The Beginning of the End of the Password
by shadowgovt on Thursday May 04, 2023 @09:09AM
(#35814687)
Yes, the hardware vendor that controls the kernel and chips can do whatever they want. I meant there is no method as per the definition of the protocol to MITM the passkey because the device only ever emits the public key unencrypted.