News for hackers. Stuff that matters.
Re:Passkeys: A Shattered Dream by gehsty on Friday April 26, 2024 @03:50AM (#40166829)
I thought passkeys were shared across Apple keychain (like passwords?) so you make a passkey on iPhone your iPad can use it.
Re:Passkeys: A Shattered Dream by vbezhenar on Friday April 26, 2024 @03:55AM (#40166858)
Yes, that's correct, they're stored in Keychain and shared using iCloud.
Re:Passkeys: A Shattered Dream by saagarjha on Friday April 26, 2024 @04:01AM (#40166896)
Ah, yes, poor choice of words on my part. They are in iCloud Keychain (I think this is required?). But if you only have one device it's basically the same thing, or if you're trying to leave the ecosystem.
Re:Passkeys: A Shattered Dream by whereismyacc on Friday April 26, 2024 @07:05AM (#40167898)
Are they not private keys that shouldn't be synced across devices? I thought icloud facilitated automatic creation of passkeys for each device, not actually sharing the same passkey across devices?
Re:Passkeys: A Shattered Dream by landmass on Friday April 26, 2024 @11:38AM (#40170792)
There are two types of passkeys (1) resident, hardware-bound, non-copyable, installed on Yubikey etc., and (2) non-resident, copyable.

Technically, by not being copyable, a resident key isn't a "Passkey," but that's just terminology and it serves the same purpose as a passkey.

Re:Passkeys: A Shattered Dream by FireBeyond on Sunday April 28, 2024 @03:56AM (#40186855)
That's the crux of one of the debates... members of the FIDO Consortium threatening KeePassXC and other open source tools with blocking for sharing "roaming keys", meanwhile "Oh, Apple wants to share keys via AirDrop? No problem", which is one of the concerns, that it's yet another "push users to Apple and Google's tool of choice".