Comment by impoppy
8 days ago
First of all, what’s wrong with the author, if you have to read through 14 paragraphs to finally reach the point where they actually write on the topic directly.
Second, I think the article is really silly. If they are concerned that eventually service providers might restrict passkey authentication to authorized passkey providers, what prevents them from disabling password/TOTP authentication? That’s just silly. I’ll use passkeys while they are convenient. If service providers start disallowing my passkey provider, I’ll either switch to password/TOTP if that’s possible or just stop using the service whatsoever. What’s the big deal?
You assume you will be able to stop using them.
If they will be popular, and made inconvenient, you could be forced to use them. Like 2FA in corporate environments; it's forced and you can't do anything else than to put a code every time you login somewhere.
If that’s the case, then there’s even less to be done, isn’t there?