Re:FIDO Alliance publishes new spec to let users move Passke...
by bastawhiz on Wednesday October 16, 2024 @09:53PM
(#41865711)
It's a problem for anything where you need to manually keep backups of key material. It's why so many cryptobros lost millions (billions?). If you expect the average person to keep their passkey backup stored well enough to avoid the possibility of physical disaster or losing access to their Google Drive, you've set them up for failure. And when the stakes are losing access to your online life, that's a catastrophic design flaw.
[ Parent
| on HN ]
Re:FIDO Alliance publishes new spec to let users move Passke...
by lisper on Wednesday October 16, 2024 @09:59PM
(#41865739)
> It's a problem for anything where you need to manually keep backups of key material.
Well, OK, but what is the alternative?
(Actually, you don't need to manually keep backups. You can have automatic backups, but those come with their own set of risks.)
Re:FIDO Alliance publishes new spec to let users move Passke...
by bastawhiz on Thursday October 17, 2024 @10:30AM
(#41870028)
I'd give a key to my bank that they could create signatures with if I asked for (and was authenticated with) that third parties could trust to bypass my passkey. I'd pay a fee for it, the bank holds liability for verifying my identity.
Banks aren't perfect but mine already has all my money and the deed to my house. I trust the safety of my bank more than I trust Google not to lock me out or all my hardware to be destroyed.