News for hackers. Stuff that matters.
Re:Passkeys now support external providers by Analemma_ on Tuesday June 06, 2023 @04:40PM (#36218796)
> The server has an encrypted copy of your private key, which your with token decrypts with its private key.

No, that's completely incorrect. I'm not sure where you got that impression, it would be idiotic to design an authentication protocol that way. The server has your public key, you have the private key, and that's how the server knows it's you.

There are no comments on this comment yet.