Re:KeePassXC Issue: [Passkeys] should never be exported in c...
by JohnFen on Thursday March 14, 2024 @01:29PM
(#39706708)
> And genuinely, I think the tone of the conversation on this Github issue justifies all of those fears.
I found that conversation to be straight up chilling.
> because in its current state I can't recommend anyone that I know -- at all -- use passkeys.
In the end, personally, it's about whether or not I am willing to use passkeys. If I am not willing to use them, I certainly am not willing to recommend that others do so.
To use passkeys already means giving up quite a lot. That's not necessarily a showstopper, if the benefits outweigh the drawbacks. Personally, right now, it's not an easy call at all.
The attestation issue, as well as the sentiments expressed in the github thread, don't exactly help.
I found that conversation to be straight up chilling.
> because in its current state I can't recommend anyone that I know -- at all -- use passkeys.
In the end, personally, it's about whether or not I am willing to use passkeys. If I am not willing to use them, I certainly am not willing to recommend that others do so.
To use passkeys already means giving up quite a lot. That's not necessarily a showstopper, if the benefits outweigh the drawbacks. Personally, right now, it's not an easy call at all.
The attestation issue, as well as the sentiments expressed in the github thread, don't exactly help.