News for hackers. Stuff that matters.

A comment on Google announces passwordless by default: Make the switch to passkeys. Parent comment

Re:Google announces passwordless by default: Make the switch... by lxgr on Tuesday October 10, 2023 @03:53PM (#37836641)
That is not without risk either:

Many more people have a copy of my passport than have access to my Yubikey or recovery phone number.

[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by kube-system on Tuesday October 10, 2023 @07:45PM (#37839225)
Yes, remotely accepting a copy of an identity document from the other end of a wire is not a good authentication method. That's because they're not intended for remote digital authentication. Photo IDs are intended to be validated in-person, using the original document, and the photo visually compared to the person holding it.
[ Parent | on HN ]