31–40 of 121 posts
The demo is just using OTP sent to my email, which essentially makes my email a password manager, and now a much higher value target.
Jus a note for the creator. Not all email adresses support the +n thing. Just gmail based
Jus a note for the creator. Not all email adresses support the +n thing. Just gmail based
I'm a bit confused with WebAuthn/Passkeys/Fido If I have a single hardware key/tpm/yubikey/iphone/etc - can you create multiple users on one site? And can they tell that you're the same user? Or are you now locked to just a single user for your phone/macbook/yubikey/whatnot? Also if multiple services colluded (or integrated with say GA) - can they (or at least GA) all tell that you're using the same hardware key acro…
As for privacy, services can require additional info from your key (WebAuthn shows an additional confirmation button). This info includes the manufacturer and probably some other info (not sure about that). Otherwise it should be impossible to tell if a single key is used for multiple usernames.
This completely fails on Linux (doesn't even pop up the dialog for my FIDO2 key), even though WebAuthn on e.g. https://www.pastery.net works fine (and works fine with Passkeys on my Android phone).
Just looking at the table at the bottom of the page, "where can passkeys be used", Ubuntu is the only Linux distro listed, and it does not support Passkeys.
I would really like this tech if they supported third party services to store passkeys in.
Very nice, a good step towards the future. Just tried on multi-device scenario with android and my mac and that worked fine. I'm wondering though, how the biometric data gets associated with my email address.
From what I remember, your biometric data shouldn't get associated at all. Your hardware uses your biometrics to unlock the onboard enclave / vault and then the process asking can obtain or create what it needs once unlocked. If you don't have biometrics enabled it would resort to your phone password/pin. Don't take my word for it though!
What links are created between all these accounts? Does Google now know that their account B is linked to email A? Does Hankio? Or is that the service provider?
Earlier quoted context omitted.
Just looking at the table at the bottom of the page, "where can passkeys be used", Ubuntu is the only Linux distro listed, and it does not support Passkeys.
Yes, but it supports WebAuthn, which works fine, so I'm confused as to why this site is Passkeys-specific and doesn't use WebAuthn, which, as far as I can tell, is a superset.