Re:Passkeys: A Shattered Dream
by gehsty on Friday April 26, 2024 @03:50AM
(#40166829)
I thought passkeys were shared across Apple keychain (like passwords?) so you make a passkey on iPhone your iPad can use it.
[ Parent
| on HN ]
Yes, that's correct, they're stored in Keychain and shared using iCloud.
Ah, yes, poor choice of words on my part. They are in iCloud Keychain (I think this is required?). But if you only have one device it's basically the same thing, or if you're trying to leave the ecosystem.
Re:Passkeys: A Shattered Dream
by whereismyacc on Friday April 26, 2024 @07:05AM
(#40167898)
Are they not private keys that shouldn't be synced across devices? I thought icloud facilitated automatic creation of passkeys for each device, not actually sharing the same passkey across devices?
There are two types of passkeys (1) resident, hardware-bound, non-copyable, installed on Yubikey etc., and (2) non-resident, copyable.
Technically, by not being copyable, a resident key isn't a "Passkey," but that's just terminology and it serves the same purpose as a passkey.
Re:Passkeys: A Shattered Dream
by FireBeyond on Sunday April 28, 2024 @03:56AM
(#40186855)
That's the crux of one of the debates... members of the FIDO Consortium threatening KeePassXC and other open source tools with blocking for sharing "roaming keys", meanwhile "Oh, Apple wants to share keys via AirDrop? No problem", which is one of the concerns, that it's yet another "push users to Apple and Google's tool of choice".