alt Hacker NewsThe fact that services can ban passkey providers is a major red flag in the protocol and the real issue that nobody talks about
well, people are talking about it but it's not making a difference https://lucumr.pocoo.org/2025/9/2/passkeys/
The fact that services can ban passkey providers is a major red flag in the protocol and the real issue that nobody talks about
well, people are talking about it but it's not making a difference https://lucumr.pocoo.org/2025/9/2/passkeys/
This is why I am so concerned about passkeys. They could be a good improvement, but in practice I already see how it's going to result in Google/Apple/Microsoft/whoever seizing even more control.
The document there is laughable too, because KeepassXC is listed as "not performing User Verification" when it demands manual authorization per request. But this isn't good enough for the passkey people. Ultimately, I see any FOSS option being effectively banned from most services and all important ones. It's a parallel to how you must now be on Cloudflare's nice list or be banned from the majority of the internet.