Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
debazel
7 hours ago
|
parent
|
context
|
favorite
| on:
Don't use passkeys for encrypting user data
I do not want any business with Apple/Google/Microsoft at all, including owning an Android or iPhone for hardware attestation.
help
jesseendahl
5 hours ago
[–]
You don't need to use anything from Apple/Google/Microsoft. Passkeys are just WebAuthn which is an open standard.
reply
debazel
4 hours ago
|
parent
[–]
An open standard that has attestation in it which allows sites to block all open implementations. FIDO Alliance spec writers have even threatened that apps like KeepPassXC could be blocked in the future because they allow you to export your keys.
reply
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: