Comment by comex

5 days ago

Though obnoxiously, the public computer login method doesn’t rely solely on the QR code it shows, but also uses Bluetooth. So if you want to log in on a VM or computer without Bluetooth, or a physically distant computer being accessed remotely, you have no choice but to install your password manager on that computer. Which is a lot less secure than copying a single password and one-time code.

VMs and remote access can implement passthrough for passkeys, just as passthrough has been implemented for smart cards (CCID).