News for hackers. Stuff that matters.

A comment on The Cryptography Behind Passkeys. Parent comment

Re:The Cryptography Behind Passkeys by lxgr on Wednesday May 14, 2025 @06:31PM (#43989859)
caBLE is not a specification for transferring secrets, but for mediating (temporary) access to them.

But the FIDO alliance is apparently working on that: https://fidoalliance.org/fido-alliance-publishes-new-specifi...

[ Parent | on HN ]
Re:The Cryptography Behind Passkeys by taeric on Wednesday May 14, 2025 @09:37PM (#43990988)
I actually thought it was more for mediating confirmation of access to them. You don't share the secret with the new party, but you and the vendor both do a flow with them to confirm that someone claiming to be an identity can support that claim.
[ Parent | on HN ]