illy [Shrimple-mode] :protomoji_orange_flag_lesbian: (@illyBytes)

Misty @misty@digipres.club

2w

Edit: got some more details that make this look less bad; see the replies.

I’m not anti-passkey, but I got caught really off guard by a site automatically creating a passkey for me with zero user input. Imagine if I’d logged in on a shared device and now the device owner gets passwordless access to my eBay account!

22

5

2

0

Misty @misty@digipres.club

2w

This is I think my biggest problem with the passkey ecosystem. It’s very poorly explained and yet every site is very eager to get me to switch to passkeys without making sure the user knows anything about what’s going on or the implications of any of it.

1

8

0

2

1

Shadow, First of His Name

@darkpixel@infosec.exchange

2w

@misty I understood the implications of 2fa/mfa but never got into passkey because it lacks clear explication. If nothing else, I understood this as storing in someone's else cloud.

1

0

1

0

illy [Shrimple-mode]

@illyBytes@shrimp.imsofucking.gay

2w

@darkpixel @misty thats only one, very popular, form of passkeys, normally they should store your part of the shared key inside the secure thing of your device

0