Karl Voit 
@publicvoit@graz.social
PIMfluencer https://karl-voit.at/about/ Influencing myself all the time. Rabbit-hole investigator. Hide German posts via selecting your preferred language(s) via: Preferences→Other→Filter languages (will work in future) I don't fav read toots. #PIM #FOSS #Emacs #orgmode #Orgdown #bicycle #decentralization #security #privacy #Austria #Graz 
Joined Mastodon 2017-11 Indexed on tootfinder Can't buy my recommendation except by showing excellence NOT political correct
graz.social
Replying to
@mkristensson@thepit.social
@mkristensson@thepit.social True.
However, some megacorps are extending passkeys to allow for sharing and moving keys. Unfortunately, you lose the phishing protection with that as well.
So yes, some passkeys setups aren't protection against phishing any more. 😞
Therefore, I use user/password + #FIDO2 hardware token when it *really* needs to be secure and #TOTP for the rest.
Even with passkeys, FIDO2 hardware tokens don't support those convenience features where #passkeys lose #phishing protection.
More on https://karl-voit.at/FIDO2-vs-Passkeys/ (German)
#security #publicvoit