News for hackers. Stuff that matters.
Re:The Cryptography Behind Passkeys by udev4096 on Thursday May 15, 2025 @03:13AM (#43992592)
Do not use a vendor for managing passkeys. Use a self hosted password manager like vaultwarden. Or spin up an OIDC provider with pocket-id. Using a vendor is just pointless and should be avoided at all costs
Re:The Cryptography Behind Passkeys by taeric on Thursday May 15, 2025 @09:32AM (#43994898)
I do that. Largely. I prefer hardware tokens.

I also have to confess this is clearly less convenient than having Apple or Google manage them for me.