Looks like a huge amount of security vendors are working to have a secure and open standard for passkey portability between platforms.
It is always good to see major collaboration in the security space like this considering the harsh opinions that users of some of these vendors have toward many of the others. I just wish apps and sites would stop making me login with username and password if passkeys are meant to replace that lol.
Why is the buzz around passkeys is back? I am seeing them way more often than they used to be. I think I have created passkeys for 2 apps and don’t even know how that worked, it such a breeze that almost felt it wasn’t secure lol.
In what ways the passkeys are different than authenticator apps?
Convenience and security.
Authenticator apps are still vulnerable to phishing, passkeys are not.
With the ability to transfer passkeys, the attack vector phishing does not sound that far fetched. Tho i have not looked into the transfer process.
We will see i guess.
Idk, a SSH-Key is also transferrable, yet it’s still safe
And given that Passkeys are essentially specialized ssh-keys, I don’t see the Problem.
But I’d like to know it I’m wrong.
