Comment by mitthrowaway2

5 days ago

Who is "you" here? The person logging in (ie, the client), or the person providing the service (ie, a bank)?

I should have been clearer, you = person providing the service

  • I see. I believe the original "Passkeys are a trap" article was written from the point of view of the person logging into a service, who doesn't by themselves control enough market power to compel the service provider to support their preferred configuration of passkey. And thereby might find themselves forced to use an Android or iphone in order to access the normal infrastructure of society, such as banking or government services, when hardware-attestation passkeys become prevalent enough that, like Chrome, vendors can simply choose not to support alternatives.

    I don't think they intended to make any argument that passkeys could be a trap to service providers.