41–50 of 121 posts
Jus a note for the creator. Not all email adresses support the +n thing. Just gmail based
I mistakenly assumed the "+" thing is built into the email standard.
What if your device cannot connect to internet? OTP can work even if device is offline.
Jus a note for the creator. Not all email adresses support the +n thing. Just gmail based
Then tried signing in. "Enter the passcode that was sent to ." Fail 2 - no passcode was ever sent. (Yes, I tried the resend button multiple times, because I'm not a moron. Yes, I checked my spam folder, because I'm not a moron. I know the HN crowd would have taken great pleasure in explaining the obvious to me if I hadn't mentioned it.)
Even if that had worked, how is copying a code from unencrypted email supposed to be either easier or more secure than a password? Fail 3.
I would really like this tech if they supported third party services to store passkeys in.
Wouldn't that completely eliminate the security benefits of passkey?
Tried entering my email. Fail 1 - doesn't allow autofill. Then tried signing in. "Enter the passcode that was sent to ." Fail 2 - no passcode was ever sent. (Yes, I tried the resend button multiple times, because I'm not a moron. Yes, I checked my spam folder, because I'm not a moron. I know the HN crowd would have taken great pleasure in explaining the obvious to me if I hadn't mentioned it.) Even if that had worked…
1. It allowed me to auto fill. Both the email and the pass code.
2. The pass code was sent and I received it without issue.
So, not sure what happened to you, but your failures don't seem an issue with Passkeys, but rather just software in general.
Jus a note for the creator. Not all email adresses support the +n thing. Just gmail based
Additionally, gmail normalize all periods (.) to the mail address without periods.
So your.name@gmail.com yo.u.r.n.a..m.e@gmail.com both get delivered to yourname@gmail.com
Tried entering my email. Fail 1 - doesn't allow autofill. Then tried signing in. "Enter the passcode that was sent to ." Fail 2 - no passcode was ever sent. (Yes, I tried the resend button multiple times, because I'm not a moron. Yes, I checked my spam folder, because I'm not a moron. I know the HN crowd would have taken great pleasure in explaining the obvious to me if I hadn't mentioned it.) Even if that had worked…
Email codes are just the fallback auth method in case no passkeys are supported on the device or the user has lost access to the passkeys. In real world scenarios, this may be secure enough, or fallback authentication could be disabled completely, or secured with Security Keys or other 2FA methods, depending on the use case.
1) How can I share the fingerprint keys between chrome and safari?
2) How do I share keys between different types of devices? (mac, ios, android, windows)
3) What happens if my devices are gone?
4) What happens if I want to change my login (email to a new email for example)?
5) Is account recovery handled simply by a reset-email?
6) It seems a validation step of the email is missing?