Re:Microsoft Confirms Password Deletion for 1B Users
by jazzyjackson on Tuesday December 17, 2024 @01:23PM
(#42443804)
It surprised me too since I thought the whole point of passkeys is that you're using a thing-you-own to authenticate, but really the whole point is that the security credential is never transmitted to the service doing the auth.
[ Parent
| on HN ]
Re:Microsoft Confirms Password Deletion for 1B Users
by lxgr on Tuesday December 17, 2024 @06:44PM
(#42446687)
That’s not the (entire) point of passkeys/WebAuthN at all!
It’s a pretty powerful/complex spec allowing various use cases, from a modern way to store SSH keys on hardware credentials to a more usable and less phishable password replacement backed entirely by software.