Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I guess we'll have to wait and see whether websites will force people to use specific authenticators. I don't think they will.


We can already see this to some degree. On my Android device, Chrome will only let me create a synchronized passkey in a Google account UNLESS attachment is explicitly set to "cross-plattform" - even though not specifying the option is supposed to allow all types.

You can try this out on webauthn.io and changing the attachment setting.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: