that’s not the point, passkeys are not vendor centric, they are a standard. you don’t want to duplicate a passkey for the same reason you don’t want to copy an SSH private key on multiple devices. it’s a security feature that allows disabling the account access in case the device becomes compromised (lost, stolen, infected, etc.)
exactly, but are people using it outside of proprietary apps like whatsapp? not really that much.
no use in being open if in practice its still controlled by monopolistic corporations.
i could use chrome or android as an example too. are there people using custom roms or forks and exercising their openness? yeah, but not that much either.
thus rendering them redundant, because their strength is being bound to a single physical device. if they’re portable, they’re as good as asymmetric key pairs.
Their strength is being half a cryptographic key, not that they’re device bound.
That was a “requirement” that big tech wanted, to force you to be dependent on TPM storage, so you’d be forced to use a Trusted™ device and OS. It was made optional after pushback from basically everyone else.
Password managers support Passkeys now. Bitwarden and KeePassX among others.
As long as I trust that my password manager is secure, and as long as I use a strong master password or (better) have a hardware key to unlock it, it is way more secure than a password, and I can still install Linux without losing my logins.
yay vendor lock in. google or meta password manager salivating.
that’s not the point, passkeys are not vendor centric, they are a standard. you don’t want to duplicate a passkey for the same reason you don’t want to copy an SSH private key on multiple devices. it’s a security feature that allows disabling the account access in case the device becomes compromised (lost, stolen, infected, etc.)
they are standard, but so did xmpp or many others before.
xmpp is still alive and is still an open standard
exactly, but are people using it outside of proprietary apps like whatsapp? not really that much.
no use in being open if in practice its still controlled by monopolistic corporations.
i could use chrome or android as an example too. are there people using custom roms or forks and exercising their openness? yeah, but not that much either.
Bitwarden has been working great with me as sits transition to passkeys, even big corporate ones.
But yeah in practice, google and facebook are going to probably dominate because they are the easy + free option.
KeepassXC supports passkeys as well.
thus rendering them redundant, because their strength is being bound to a single physical device. if they’re portable, they’re as good as asymmetric key pairs.
Their strength is being half a cryptographic key, not that they’re device bound.
That was a “requirement” that big tech wanted, to force you to be dependent on TPM storage, so you’d be forced to use a Trusted™ device and OS. It was made optional after pushback from basically everyone else.
Password managers support Passkeys now. Bitwarden and KeePassX among others.
As long as I trust that my password manager is secure, and as long as I use a strong master password or (better) have a hardware key to unlock it, it is way more secure than a password, and I can still install Linux without losing my logins.
i’m assuming most people will use the default, which will probably be google lock in anyway.