News for hackers. Stuff that matters.

A comment on Passkey technology is elegant, but it's most definitely not usable security. Parent comment

Re:Passkey technology is elegant, but it's most definitely n... by Borealid on Monday December 30, 2024 @09:55AM (#42549795)
No, Apple directly benefits in that users only get the "magical" user experience when using Apple devices. There are two perverse incentives: one for Apple to lock their users into their platform, and one for Apple to implement a "better" experience unilaterally. Apple does both of these things.

Today, if I create a passkey on an Apple iPhone, and I pay Apple a monthly fee for iCloud, I can then walk over to an Apple Macbook I own and sign in to the same web site without another step.

But if I don't pay Apple a monthly fee, OR the phone isn't an iPhone, OR the laptop isn't a Macbook, then I don't get that user experience.

There is absolutely no technical reason that I shouldn't be able to get precisely the same level of security and precisely the same user flow without having to need all the devices to be Apple. But Apple chooses to restrict how it can happen.

[ Parent | on HN ]
Re:Passkey technology is elegant, but it's most definitely n... by kalleboo on Monday December 30, 2024 @10:09AM (#42549931)
Apple allows you to use third party apps as passkey providers
[ Parent | on HN ]
Re:Passkey technology is elegant, but it's most definitely n... by fastball on Tuesday December 31, 2024 @12:55AM (#42556751)
Not on their own websites, AFAIK.
[ Parent | on HN ]
Re:Passkey technology is elegant, but it's most definitely n... by mercutio2 on Monday December 30, 2024 @03:10PM (#42552959)
Why do you say you have to pay a monthly fee for iCloud?

None of the technology you’re discussing here requires a paid account.

You may, separately, decide to sync more than the meager free quota of data on iCloud, but that’s an unrelated issue. You’re welcome to use iCloud just for keychain sync.

[ Parent | on HN ]