Post #4036966
2026-07-23 13:24 UTC
@patrizia@hachyderm.io @TindrasGrove@infosec.exchange Passkeys deeply terrify me due to the unchecked assumptions and requirements.
Like we should never assume a users device will always be accessable, reliable, and always owned by an individual.
Replies (1)
-
@TindrasGrove@infosec.exchange 2026-07-23 13:28
@Epic_Null@infosec.exchange @patrizia@hachyderm.io I am right there with you! For my corporate work stuff where if they fail, I can have my manager verify my identity to the help desk to do a reset? Fine. For things like my personal email where there’s not a way for me to reach someone who will reset? Fuuuuuuuuccckk noooo!!! The failure mode is just too much for me.