Post #2124381
2026-04-09 12:10 UTC
@discontinuity ohh, I would love to hear that talk. Also reminds me of this post, which would be a great thing to include there as well: https://blog.timcappalli.me/p/passkeys-prf-warning/
Replies (1)
-
@discontinuity@infosec.exchange 2026-04-09 12:24
@hacksilon ooh that's a fascinating failure case. And like... I always have multiple passkeys for each account so I don't have to worry about the impact of losing one (lost or broken device bound key.) I can't back up my yubikey passkey!! This is really a terrible design that assumes happy path. My favorite!