News for hackers. Stuff that matters.
Re:FIDO Alliance publishes new spec to let users move Passke... by portaouflop on Wednesday October 16, 2024 @02:38AM (#41856209)
Idk I just set up both - email&password which live in my password manager and then passkeys for convenience - I can just hit a button without thinking and I’m in.

It’s probably different for everyone but in case I have strictly separate devices- so a laptop where I have my work accounts and a desktop for games and some personal stuff.

I don’t really use anything on a regular basis that needs accounts on my personal devices, but that’s probably very weird nowadays…

Re:FIDO Alliance publishes new spec to let users move Passke... by sph on Wednesday October 16, 2024 @02:56AM (#41856299)
I already hit a button (the Bitwarden icon in my browser toolbar) so I do not see what passkeys buy me, except a terrible hassle the day I want to change password manager.

It is a solution designed to lock people in the Apple/Google walled gardens, and I don't see why everybody is pushing for it.

Re:FIDO Alliance publishes new spec to let users move Passke... by izacus on Wednesday October 16, 2024 @03:21AM (#41856437)
Passkeys work fine with password managers like 1Password, KeePassXC, Bitwarden and others, why do you keep repeating this walled garden shtick?

They're literally a cryptostring stored in your password manager just like your other passwords.

Re:FIDO Alliance publishes new spec to let users move Passke... by troupo on Wednesday October 16, 2024 @03:33AM (#41856517)
> They're literally a cryptostring stored in your password manager just like your other passwords.

So I can copy paste them somewhere or move them around without "Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF)"?

Re:FIDO Alliance publishes new spec to let users move Passke... by rcxdude on Wednesday October 16, 2024 @05:02AM (#41857036)
With Keepass you can, at least. Other ones not so much.
Re:FIDO Alliance publishes new spec to let users move Passke... by izacus on Wednesday October 16, 2024 @06:09AM (#41857384)
You can copy paste them using those formats. What are you arguing about here actually?
Re:FIDO Alliance publishes new spec to let users move Passke... by FireBeyond on Wednesday October 16, 2024 @06:53PM (#41864695)
How does one get a passkey from iCloud into one of these formats?

"You can't take your passkeys from Apple Passwords"

s/iCloud/1Password?

"There's not a way to import/export passkeys"

s/iCloud/Google?

So "you can copy paste them using those formats, if you can get them into those formats in the first place".

Re:FIDO Alliance publishes new spec to let users move Passke... by lxgr on Thursday October 17, 2024 @05:07AM (#41867752)
Apple actually does allow airdropping passkeys across devices and iCloud users!

It’s clearly not (just) a security but a lock-in feature.

Re:FIDO Alliance publishes new spec to let users move Passke... by lxgr on Thursday October 17, 2024 @05:01AM (#41867711)
Have you ever migrated one across password managers yourself? I tried; it currently seems impossible.