News for hackers. Stuff that matters.
Re:The Cryptography Behind Passkeys by shellcromancer on Wednesday May 14, 2025 @03:32PM (#43988343)
The FIDO Alliance (who wrote the WebAuthn spec with the W3C) has a draft specification for a format (Credential Exchange Format) and protocol (Credential Exchange Protocol) for migrating passkeys and other credentials [1]. I don't think this is implemented by any providers yet, but it's being worked on.

[1] https://fidoalliance.org/specifications-credential-exchange-...

Re:The Cryptography Behind Passkeys by conradev on Thursday May 15, 2025 @01:45AM (#43992190)
The big remaining issue in my mind is this one:

https://github.com/fido-alliance/credential-exchange-feedbac...

I am worried about providers blocking exports “because security”. That’s Apple’s favorite argument