We had originally planned to go all-in on passkeys for ONCE/Campfire, and we built the early authentication system entirely around that. It was not a simple setup! Handling passkeys properly is surprisingly complicated on the backend, but we got it done. Unfortunately, the user experience kinda sucked, so we ended up ripping it all out...
  • sir_pronoun@lemmy.worldEnglish
    0·
    2 days ago

    I’d be interested in a discussion of his points here :) those sound like valid points he’s making

    • asap@lemmy.worldEnglish
      0·
      2 days ago

      Even in the best case scenario, where you’re using an iPhone and a Mac that are synced with Keychain Access via iCloud

      Surely the better-case scenario would be using a password manager?

      The article doesn’t address the recommended use-case of passkeys + password manager, which makes it kind of irrelevant.

      • sir_pronoun@lemmy.worldEnglish
        0·
        2 days ago

        But that is exactly what he recommends, using a password manager - with one time email authentication for the first login as an extra step, right?

        • asap@lemmy.worldEnglish
          0·
          2 days ago

          edit: I think I’ve misunderstood the point of the article. In a non-obvious (to me at least) way, he is saying passkeys are dangerous for people without password managers, therefore for most people passwords are still better.