‹ BackHN Continuity

Thread

I don't like passkeys

853 points · 819 comments · ethanhawksley

  1. kenrick95 · · focus · HN ↗
    Passkeys have a marketing problem where no one is able to describe simply what it is without having to use technical jargon. There's also the problem where each OS tries too hard in pushing this to the face of end-user
    1. cfiggers · · focus · HN ↗
      Imagine a password, but it a) types itself for you and b) detects when it's being sent to an impostor site and blocks them from seeing itself, so it can't be phished.

      Tada, passkeys.

      1. rcxdude · · focus · HN ↗
        Cool, where are they stored? (I know the answer: 'it depends', and that's the big problem with their usability: most users haven't a clue what the answer is and most tech support can't answer that question straightforwardly because it depends on some decisions the user probably didn't even realise they made).
        1. wolvoleo · · focus · HN ↗
          In a secure vault on your phone
          1. malfist · · focus · HN ↗
            How do I use it on my desktop or laptop then? What if I switch browsers on my phone? What if I get a new phone? What if I change from android to iOS or visa versa? What if I need to log into the site on my Wii U's browser?
            1. faust201 · · focus · HN ↗
              as long as you have one working device all will be OK. Either you scan the QR code shown by the website. or if you did login to Chrome with google account then desktop or laptop will just sign you -friction less. Same with iCloud account.

              If you browser vendor has implemented passkey then all good.

              Most things are built for the majority users. Most don't change. Most don't debate browser wars in hn. Life is like that.

              For Wii etc. You just scan the QR code shown in the TV interface. all just works.

              Yes, if you want 100% privacy and will do only your own dovecot server then it is not for you.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.