Comment by jchw

Passkeys are still a trap even if consumer passkey implementations don't currently support attestation. They are still ridiculously anti-consumer, overrated, and definitely still a risk for the open web because the door to attestation is right there.

Why does my bank (Chase) allow iCloud but not KeePass XC? Imagine if my bank got to choose what password managers I was allowed to use to write my password into. That is literally Passkeys, with optional cryptographic enforcement that people promise won't be used for anti-consumer reasons. (People. Not Microsoft or Google or Apple, but people.)

Secure Boot and TPM were also billed somewhat similarly in different times and now Windows 11 requires it and a lot of software and games require remote attestation with secure boot.

This cover story has already been used before, we already saw where it leads. Will people be foolish enough to believe it wouldn't happen twice?