News for hackers. Stuff that matters.
Re:Email addresses are not good 'permanent' identifiers for ... by mooreds on Sunday December 31, 2023 @01:01PM (#38826045)
> Passkeys aren’t device-bound. I think they’ll work just fine.

Depends on the implementation. Some passkeys are device bound. The free ones, typically. Unless you trust Apple and Google to preserve and protect private keys.

Re:Email addresses are not good 'permanent' identifiers for ... by dcow on Monday January 01, 2024 @11:13AM (#38832863)
WebAuthn can be device bound. A Passkey is webauthn with nil authdata.