Comment by j16sdiz
7 days ago
Passkey, as currently implemented, is not something I wish to use.
I have sign up a few for "get a feel" of what is going on.
but the implementation outside a few flagship website just sucks. It is infested with the "design by committee" disease -- too many options, almost impossible to implement correctly.
Eh, it’s alright. The spec is quite overengineered, but practically it’s very possible to achieve a good user experience.
And conversely, there are also many ways to make legacy password based auth break password managers and annoy users even though there’s no specification for that at all.