News for hackers. Stuff that matters.
Re:Passkeys now support external providers by kahnclusions on Sunday June 11, 2023 @02:45PM (#36284343)
This is incorrect, according to Apple’s developer docs, which states that only the public key is sent to servers. They emphasise this as a benefit: your key can’t be leaked because servers only ever receive your public key.

The private key never leaves your device except to be encrypted and synced to your other devices using iCloud Keychain.

There are no comments on this comment yet.