Re:Passkeys: A Shattered Dream
by vbezhenar on Saturday April 27, 2024 @02:12AM
(#40177697)
That's not true. Phone and PC have to communicate via bluetooth.
[ Parent
| on HN ]
Re:Passkeys: A Shattered Dream
by tsimionescu on Saturday April 27, 2024 @02:18AM
(#40177718)
Edit: everything I say below is not just wrong, but confidently wrong...
"Communicate over bluetooth" doesn't mean anything. What app or BT device would they be using? How would a PC communicate with a YubiKey over bluetooth?
I have no idea where you got this strange concept from, but registering multiple passkeys from multiple devices on the same account on a site requires no communication between the devices - it only requires a trusted device to approve the request.
That's how it works. You open Google Chrome on Linux, press "Log in with PassKey", scan QR with iPhone, then iPhone contacts Google Chrome via bluetooth to do its crypto magic (which doesn't work 50% of times) and may be it'll work.
No idea how Yubikey works, never used it.
Re:Passkeys: A Shattered Dream
by tsimionescu on Saturday April 27, 2024 @03:56AM
(#40178188)
Wow, I stand corrected, sorry. This seems entirely absurd, so much extra complexity is crazy.