News for hackers. Stuff that matters.

A comment on Google announces passwordless by default: Make the switch to passkeys. Parent comment

Re:Google announces passwordless by default: Make the switch... by jasonjayr on Tuesday October 10, 2023 @05:46PM (#37838035)
Appreciate the response. And I wish this message was front and center. The Attestation feature is what worries me, when, say, the bank turns it on for a few 'blessed' providers, or mandate a hardware implementation.

Watching https://github.com/keepassxreboot/keepassxc/issues/1870 with baited breath... :)

[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by skarra on Wednesday October 11, 2023 @12:27AM (#37840880)
Your concern around attestation (mis)use is spot on. I'd say the industry is yet to arrive at an acceptable consensus or compromise on that question.
[ Parent | on HN ]