Verizon's #passkey implementation is quite good. They're naming the Credential Manager correctly, and they're using RCS Business Messaging for proof up prior to enrollment. Well done.
Remote
tim
@timcappalli@infosec.exchange
🔐 #passkeys 🪪 verifiable digital credentials
🏒 bruins 🚆 urban mobility
867
Followers
264
Following
43
Posts
Joined November 07, 2022
Home:
GitHub:
Gravatar:
Bluesky/ATP:
@timcappalli.me
Posts
Why are git commit signing and tag signing two different configurations? In what scenario would you want to sign one and not the other?
Just posted the slides and audio recording from my session with @iamkale@infosec.exchange from Identiverse 2026 which talked through some of the biggest misconceptions about #passkeys throughout 2025.
We're so fucked.
"It also drew attention as New York-based Hugging Face said it had used an open-source Chinese model to contain the attack because leading U.S. models, unable to tell a defender from an attacker, refused to process the data needed for analysis."
Discovered "unregistry" this week. It has already saved me soooo much time while building.
Replying to
@mike@social.mikewells.name
@mike@social.mikewells.name @rmondello@hachyderm.io if you're saving your passkeys to the same Bitwarden vault, then they're also being backed up.
I'm working to aggregate some common questions about #passkeys, both from non-technical and technical perspectives. These will be used in an end user facing site in the future.
Any and all feedback is welcome.
https://forms.gle/wmaydkzmUp2eKfJG7
(also would appreciate some reposts to widen the audience)
Replying to
@pee@mastodon.online
@pee@mastodon.online hm link works fine for me. but you only need the app to make the change. you can uninstall it after.
Replying to
@pee@mastodon.online
First ever professional women's hockey game at TD Garden 👏🏻
Replying to
@cthos@mastodon.cthos.dev
Please, please, please stop using #passkeys to encrypt user data. Please 🙏🏻