Earlier quoted context omitted.
Security people are generally pretty positive on Passkeys. Eliminating passwords has been the white whale of information security for over 3 decades. Practitioners are generally positive about FIDO2 (Yubikeys are fetish objects for them). I think message board people would probably be surprised at security practitioner attitudes towards Apple and Google authentication lock-in (locking my team into Google authenticati…
> I think message board people would probably be surprised at security practitioner attitudes towards Apple and Google authentication lock-in We're not surprised, but I think many of us are horrified. I think it's a culture clash, partly between Free Software and Enterprise communities, partly between developers and security professionals. Given that it's a culture clash, I don't actually see any resolution that will…
Re: Passkeys and Modern Authentication
#211Many security professionals suffer from a horrible case of Boyscoutism where they think snuffing out freedoms is okay because bad people will never be doing the snuffing out.