News for hackers. Stuff that matters.

A comment on The Cryptography Behind Passkeys. Parent comment

Re:The Cryptography Behind Passkeys by godelski on Wednesday May 14, 2025 @04:47PM (#43989032) 

  > When you need to signup for a new service on the go, you can add your backup key when you get to it
Good on paper, bad in practice.

Requires you to remember doing that each and every time. Incidentally this isn't that different from just grabbing your keys like the parent suggested. Only it introduces a new variable: time delay. A lot can happen in that time and we all know the reality is that even a diligent person is going to slip now and then. It surely isn't a reasonable expectation for an average person.

[ Parent | on HN ]
Re:The Cryptography Behind Passkeys by blibble on Wednesday May 14, 2025 @05:21PM (#43989351)
I have three: 1) local usage 2) local backup key 3) remote backup key

every few months I swap 2 and 3, and re-enroll any missing (kept track of with a spreadsheet)

quite annoying, offline enrollment would be considerably better

[ Parent | on HN ]
Re:The Cryptography Behind Passkeys by rssoconnor on Wednesday May 14, 2025 @09:40PM (#43991016)
This is the way.
[ Parent | on HN ]