978
OAuth (piefed.europe.pub)
submitted 1 year ago by to c/programmer_humor@programming.dev
82 comments fedilink hide all child comments
 
OAuth
you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago* (1 child)

thus rendering them redundant, because their strength is being bound to a single physical device. if they're portable, they're as good as asymmetric key pairs.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 8 points 1 year ago

    Their strength is being half a cryptographic key, not that they’re device bound.

    That was a “requirement” that big tech wanted, to force you to be dependent on TPM storage, so you’d be forced to use a Trusted(tm) device and OS. It was made optional after pushback from basically everyone else.

    Password managers support Passkeys now. Bitwarden and KeePassX among others.

    As long as I trust that my password manager is secure, and as long as I use a strong master password or (better) have a hardware key to unlock it, it is way more secure than a password, and I can still install Linux without losing my logins.

  • permalink
  • fedilink
  • source
  • parent