▲ 978 ▼ OAuth (piefed.europe.pub) submitted 1 year ago by tfm@piefed.europe.pub to c/programmer_humor@programming.dev 82 comments fedilink hide all child comments
[–] Metz@lemmy.world 13 points 1 year ago (2 children) KeepassXC supports passkeys as well. permalink fedilink source parent hideshow 2 child comments replies: [–] lime@feddit.nu 5 points 1 year ago* (1 child) thus rendering them redundant, because their strength is being bound to a single physical device. if they're portable, they're as good as asymmetric key pairs. permalink fedilink source parent hideshow 1 child comment replies: [–] 4am@lemmy.zip 8 points 1 year ago Their strength is being half a cryptographic key, not that they’re device bound. That was a “requirement” that big tech wanted, to force you to be dependent on TPM storage, so you’d be forced to use a Trusted(tm) device and OS. It was made optional after pushback from basically everyone else. Password managers support Passkeys now. Bitwarden and KeePassX among others. As long as I trust that my password manager is secure, and as long as I use a strong master password or (better) have a hardware key to unlock it, it is way more secure than a password, and I can still install Linux without losing my logins. permalink fedilink source parent
[–] lime@feddit.nu 5 points 1 year ago* (1 child) thus rendering them redundant, because their strength is being bound to a single physical device. if they're portable, they're as good as asymmetric key pairs. permalink fedilink source parent hideshow 1 child comment replies: [–] 4am@lemmy.zip 8 points 1 year ago Their strength is being half a cryptographic key, not that they’re device bound. That was a “requirement” that big tech wanted, to force you to be dependent on TPM storage, so you’d be forced to use a Trusted(tm) device and OS. It was made optional after pushback from basically everyone else. Password managers support Passkeys now. Bitwarden and KeePassX among others. As long as I trust that my password manager is secure, and as long as I use a strong master password or (better) have a hardware key to unlock it, it is way more secure than a password, and I can still install Linux without losing my logins. permalink fedilink source parent
[–] 4am@lemmy.zip 8 points 1 year ago Their strength is being half a cryptographic key, not that they’re device bound. That was a “requirement” that big tech wanted, to force you to be dependent on TPM storage, so you’d be forced to use a Trusted(tm) device and OS. It was made optional after pushback from basically everyone else. Password managers support Passkeys now. Bitwarden and KeePassX among others. As long as I trust that my password manager is secure, and as long as I use a strong master password or (better) have a hardware key to unlock it, it is way more secure than a password, and I can still install Linux without losing my logins. permalink fedilink source parent
