News for hackers. Stuff that matters.
Re:Passkeys: A Loss of User Control? by mfwit on Sunday May 07, 2023 @04:06PM (#35855129)
"Passkeys will be importable and exportable, cross-device, and across passkey managers. They aren’t at this time, but they will be. It’s something that’s being defined and designed." -Apple Authentication Experience manger

https://hachyderm.io/@rmondello/110329118270492669

Re:Passkeys: A Loss of User Control? by dv_dt on Sunday May 07, 2023 @04:32PM (#35855361)
Until Google, or Apple, or facebook, or whoever is the passkey store holder decides to put up an interoperability wall, either through neglect, cost savings, or intentional user retention.

The big providers could provide cross company SSO (e.g. sign onto my google mail account w/ my apple identity) for all their accounts already, but for some reason that hasn't happened...

Re:Passkeys: A Loss of User Control? by josephcsible on Sunday May 07, 2023 @11:46PM (#35857845)
I'll believe this when it actually happens and I can audit the whole implementation stack myself. Until then, I trust Apple about as far as I can throw them. Remember when they got sued for lying in ads and their defense was "no reasonable person in Plaintiff's position could have reasonably relied on or misunderstood Apple's statements as claims of fact"? https://www.wired.com/2008/12/apple-says-cust/
Re:Passkeys: A Loss of User Control? by Mindwipe on Monday May 08, 2023 @02:26AM (#35858722)
"Now, FaceTime is based on a lot of open standards -- H.264 video, AAC audio, and a bunch of alphabet soup acronyms -- and we're going to take it all the way. We're going to the standards bodies starting tomorrow, and we're going to make FaceTime an open industry standard." - Steve Jobs.
Re:Passkeys: A Loss of User Control? by AlexandrB on Friday May 19, 2023 @03:28PM (#36005883)
It's great that they're aiming for this, but there's no reason to take them at their word until they actually ship something.

Also, considering that there are already multiple software vendors providing passkey hosting functionality, it seems a little late to start designing the "cross-device, and across passkey managers" part of this. If it's not in the standard already, what assurance does a user have that any of these third-party entities will implement it?