Comment by socalgal2

Question for passkey advocates, Is there is conformance test and is it comprehensive for all of a user's use cases (multiple devices, multiple passkey service providers, multiple accounts with the same service on the same device)

It the answer is "no" and you can ship an passkey implementation without passing a comprehensive conformance test then basically passkeys will always have issues. You can not get a million devs to do anything correctly unless you have a way to force them to do it. Given Google/Apple/MS are effectively gatekeepers (I know people will hate this idea) but, you could make it a requirement to pass a conformance test before the gatekeepers will issue a passkey. Same as cert authorities.

Anything else IMO is doomed to fail. More sites than not can't be bothered to use input type="email" or type="number" when all they accept is numbers or email. What hope do we have they'll use passkeys correctly?