News for hackers. Stuff that matters.
Re:Using Fido Keys by dandanua on Saturday December 09, 2023 @04:00AM (#38580043)
I don't think resident keys are that worthwhile. Relaying party anyway has to remember the user somehow, even if it's just the public key. And it still has to associate the key with the user data.

I think resident keys just complicate things for users and developers.

Re:Using Fido Keys by stavros on Saturday December 09, 2023 @07:04AM (#38581236)
Resident keys are great, I don't have to remember usernames. I don't care what the RP does, I care that I can sign in with one click.
Re:Using Fido Keys by dandanua on Saturday December 09, 2023 @09:17AM (#38582081)
But you still have to remember what the key unlocks. A username could be just a label for it.