News for hackers. Stuff that matters.

A comment on Don't use passkeys for encrypting user data. Parent comment

Re:Don't use passkeys for encrypting user data by cyberax on Saturday February 28, 2026 @04:10AM (#47192632)
Self-signed certificates are in the 'barely working' state. They operate on a wrong protocol level, and they can't be provisioned by the website itself.

If you try to describe how you _want_ the TLS client certificate UI to work, you'll end up with passkeys.

[ Parent | on HN ]
Re:Don't use passkeys for encrypting user data by goku12 on Saturday February 28, 2026 @04:25AM (#47192785)
Okay. So they took a solution that was in a barely-working state due to their deliberate neglect, and still managed to give a bad new UX when they got the opportunity to rework it?
[ Parent | on HN ]
Re:Don't use passkeys for encrypting user data by 0x0 on Saturday February 28, 2026 @06:18AM (#47193781)
> "they can't be provisioned by the website itself."

It's funny, we used to have a html tag that would exactly that: <keygen />

[ Parent | on HN ]