Re:Passkeys: A Shattered Dream
by triblemaster on Friday April 26, 2024 @08:00AM
(#40168282)
https://news.ycombinator.com/item?id=40168230
See this and let me know if it makes more sense.
Re:Passkeys: A Shattered Dream
by makeitdouble on Friday April 26, 2024 @09:03AM
(#40168955)
I understand passkeys as authentication through a private/public key generated by the client when creating the credential, with the private key staying client side and the public key kept server side, with some more details around it to make the whole thing discoverable/automatable.
To me the best explanation was just to go to the passkeys.io site, the subject is complicated enough that analogies tend to introduce a lot of cognitive noise IMHO.
Re:Passkeys: A Shattered Dream
by triblemaster on Friday April 26, 2024 @10:15AM
(#40169736)
Good idea. I didn't know of that site.
To note: the key to start a car is provided with the car with no specific operation, is locked to no other device, doesn't care about who's handling it, can be duplicated and passed around. It would be closer to the traditional password system in all of its aspects IMHO.