logoalt Hacker News

pona-ayesterday at 12:18 PM1 replyview on HN

How do passkeys make users identifiable beyond being a random token? I recall FIDO shared hardware key serial numbers with websites, but at least on Firefox, it prompts you to deny it.


Replies

zwnowyesterday at 1:51 PM

In that case one could argue emails dont make users identifiable either, if the addresses dont contain any meaningful names