News for hackers. Stuff that matters.

A comment on Passkeys: A Shattered Dream. Parent comment

Re:Passkeys: A Shattered Dream by JoBrad on Friday April 26, 2024 @07:22AM (#40168025)
The services that I use passkeys for (MS, AWS) do. I have separate passkeys for 2 browsers and on my phone.
[ Parent | on HN ]
Re:Passkeys: A Shattered Dream by bonton89 on Friday April 26, 2024 @07:52AM (#40168216)
The trouble is if it is on the service to do the support, they can revoke support at any time. They could use start tightening the screws on device attestation tomorrow for business reasons and drop support for your browser or phone.
[ Parent | on HN ]
Re:Passkeys: A Shattered Dream by JoBrad on Tuesday April 30, 2024 @02:05PM (#40214093)
How would we add MFA (in the broadest sense) without services supporting it? Or multiple MFA devices?
[ Parent | on HN ]