← Back to context

Comment by elric

7 days ago

The attestion part only serves to strengthen to Google/Apple duopoly and it should be removed from the standard entirely.

There's also the fact that passkey storage is currently shit. Even the most expensive yubikeys can only store 100 passkeys. I currently have 700+ entries in my password store, and that's excluding the business stuff. Am I supposed to faf about with 8 yubikeys? Somehow labelling them so I know which 100 passkeys each one contains?

> The attestion part only serves to strengthen to Google/Apple duopoly

That's strange, since neither of them are a big player in the attestation enabled key manufacturer market. AFAIK Apple doesn't even make keys, and barely anyone uses Google's keys. You even mention Yubikey, yet somehow think Google and Apple have a duopoly here.

I have dedicated about 0 seconds to thinking about any of this: I store mine in Bitwarden, because it offered to do so. Is that a bad idea?