Post #1074211
2026-04-06 22:02 UTC
@filippo What about WebAuthn, Passkeys, etc?
I don't see any movement in that side of the pond. Just as we are convincing everyone to switch to them
Replies (2)
-
@filippo@abyssdomain.expert 2026-04-06 22:19
@arianvp I do think they should get moving. But also, a passkey with a broken signature algorithm is still more secure than a password: the attacker needs the public key to fake a signature, and that's only in the website's database. I think it should still be phishing-resistant, too.
-
@neverpanic@chaos.social 2026-04-06 23:07
@arianvp @filippo There is movement in that area already, standards are being updated, and a few vendors seem to have development hardware tokens already, but it'll be a while until this becomes widely available.