Tag
A blog post and ensuing discussion argue that passkeys embed FIDO attestation mechanisms that could gradually let websites strip users' control over their credentials, while Apple's Ricky Mondello rebuts that attestation is explicitly not designed for mass-market consumer authentication.
Scott Helme 推翻了《Passkeys Are a Trap》一文的论点，解释了同步式 passkey 并不会向网站提供证明信息（attestation），且证明机制并不会暴露操作系统或浏览器信息，TOTP 反而是更容易被钓鱼的倒退方案。
A beginner's guide to using passkeys in Microsoft Entra, covering their benefits, types, and configuration steps for secure, phishing-resistant passwordless authentication.
This article proposes an opaque, interoperable passkey record format based on PHC strings and describes a Go API for handling them, aiming to simplify server-side passkey storage and library interoperability.
Discusses the potential of passkeys to replace passwords as a more secure authentication method.
The article introduces Revaulter v2, a tool that enables unlocking encrypted ZFS volumes at boot using passkeys (WebAuthn), allowing remote approval via a mobile web interface without storing keys in plaintext.