News for hackers. Stuff that matters.

A comment on Tailscale doesn't want your password. Parent comment

Re:Tailscale doesn't want your password by __MatrixMan__ on Thursday June 08, 2023 @01:03AM (#36237438)
Suppose one does trust their OS developers. And they want to use some passkey-protected service.

Does that service also have to trust the OS developers? Correct me if I'm wrong, but I'm under the impression that services can decide whose passkey implementations to trust.

Seems like that should be up to the user, not the service.

[ Parent | on HN ]
Re:Tailscale doesn't want your password by ptman on Thursday June 08, 2023 @03:08AM (#36238314)
The user picks the passkey, don't they? Android, Apple or Microsoft. Or Yubikey, or another token.
[ Parent | on HN ]