Viewing profile — skarra

Oh no! Now I will definitely let you have the last word.

Even Sisyphus wouldn't attempt to convince a HN crowd that not everything in the world is a big tech conspiracy...

Oh no!

I said "more interop" is coming.. There is a significant amount of interop that already exists, that folks are looking past or just already taken for granted (which is actually fin…

Thanks for your faith. I work on the team shipping passkeys at Google. We are very much hard at work to realize the full potential of passkeys. Platform lockin serves no one. That …

You can read more about the security properties of passkeys on your Google account on this post from earlier this year when support was originally announced: https://security.googl…

On account recovery, the user is strictly no worse off with passkeys relative to passwords and arguably actually better off in many cases. This is not what I'd call deliberately ig…

Your concern around attestation (mis)use is spot on. I'd say the industry is yet to arrive at an acceptable consensus or compromise on that question.

I work on Google's authentication team. I have mentioned this elsewhere in the thread.

Did you know that Apple allows sharing passkeys via Airdrop?

It is a fair observation. And I can see why users tend to be alarmed about this. Although in my experience users tend to significantly underestimate the real risks of online attack…

Passkeys represent the cumulative wisdom and experience (and compromises!) of the whole industry on how to keep users safe online. Appreciate your opinions that these efforts are d…

Password managers like Dashlane and 1Password have announced support for storing and synching passkeys. As passkeys becomes more popular I expect more providers to step up as well.…

If you are on Apple ecosystem, iCloud can sync. Other password managers like 1Password can also be used to store your passkeys. If none of the above, you can always set up a physic…

You're spot on. And I work on the Google authentication team right now :)

Think of it as using iCloud as your password manager and storing your OTPs - someone breaks into your iCloud, they get access to all the passwords and OTPs to login to any service …

You can try this: https://support.google.com/accounts/answer/13548313?hl=en , this help center page is linked to from various parts of the product experience for regular users to g…

Passkeys are a new technology and everyone - including users, service providers, and organizations - will take time to learn and adapt. In this interim period the recommended appro…