logoalt Hacker News

ori_blast Monday at 9:50 AM1 replyview on HN

Passkeys would be wonderful if they removed remote attestation. Remote attestation is still there, so I will not touch it.


Replies

lucideerlast Monday at 10:11 AM

Passkeys would be better without remote attestation, no doubt. But remote attestation is not only optional but also, passkeys are not a prerequisite for requiring remote attestation.

Lots of services that don't support passkeys currently require remote attestation. Boycotting passkeys (an open, possibly beneficial tech that doesn't require remote attestation) will not prevent bad actors from requiring remote attestation (with or without passkeys).

show 1 reply