/explore
|
You are here 
|
words.filippo.io | ||
| | | | |
janko.io
Passkeys are a modern alternative to passwords, where the user's device performs the authentication, usually requiring some form of user verification (biometric identification, PIN). Passkeys are built on top of WebAuthn specification, which is based on public-key cryptography. Keypairs are created for each website, and the public key is sent to the server, while the private key is securely stored on the device. This makes passkeys: |
|
| | | | | ||
| | | | |
huanliu.wordpress.com
Apple announced Passkey in WWDC'22 a couple of months ago. Both Microsoft and Google quickly followed suit, announcing their support in the RSA and IdentiVerse conferences. Passkey is promising to potentially replace passwords eventually, but the road to that promise may be long and bumpy. There are at least 3 issues that will prevent a... |
|
| | | | | ||
| | | | |
www.imperialviolet.org
[AI summary] A technical deep dive into Security Keys, comparing them to passwords and other authentication methods, with a detailed explanation of the CTAP1 protocol, webauthn standard, and implementation challenges. |
|
| | | | | ||
| | | | |
textslashplain.com
Passwords have lousy security properties, and if you try to use them securely (long, complicated, and different for every site), they often have horrible usability as well. Over the decades, the industry has slowly tried to shore up passwords' security with multi-factor authentication (e.g. one-time codes via SMS, ToTP authenticators, etc) and usability improvements (e.g.... |
|
| | | |||
