314
Passkeys may require some more research. (lemmy.zip)
submitted 4 weeks ago by to c/linux@lemmy.ml
122 comments fedilink hide all child comments
 

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 weeks ago* (2 children)

But large companies that want customers? They want to make it as easy as possible for their customers to connect. They’re not going to force people to have a hardware device which if damaged or lost will lose them a customer. That’s just not what they want.

I would say this is already proven to be wrong, since Microsoft Windows appears to be already doing exactly that with the special hardware device "TPM": https://rossmanngroup.com/services/encrypted-data-recovery/bitlocker ...in regular customer machines.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 3 weeks ago (1 child)

    The TPM exists because it's useful to support use cases where you want your passkeys tied to a device. It isn't a Microsoft thing either. I run Linux - my computer has a TPM. I can't use it because Linux support for the TPM is weak still, but it's there! You probably have one too if your computer was made in the last decade.

    By default, even on Windows, your website passkeys aren't stored in the TPM. No one is forcing you to store your passkeys on the TPM.

    And they won't, because it's a bloody stupid idea that benefits no one.

    Microsoft wants your passkeys synced across devices because that's how you get lock in. If the passkeys are stuck on the computer you made them on, then you may as well buy a Mac for your next computer because those passkeys are gone either way! If the passkeys are in Microsoft Password Manager though, now migrating to a Mac is harder.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •