logoalt Hacker News

INTPenis • today at 3:45 PM • 1 reply • view on HN

I mean the desire to trap seems to be among the big corporations already.

I keep seeing major players promoting their own apps over standard TOTP, which I guess could be seen as a sort of proprietary passkey. Shopify, Google, Microsoft, and more, they all want you to download their app for MFA, instead of using a very open format.

As someone who works in IT, I just can't even imagine myself doing this. I have probably around 60 codes in my Aegis, how would it look if I had just a quarter of those in apps instead?

But the main issue I have with passkeys is the simple issue of backups. I can backup my Aegis keys, I can't backup an app, or a hw passkey. I have to get a second one, and keep signing for it or something, not sure of the details, I just know it would be a major hassle. And there is no way I'm trusting a little usb device to not break.

Right now I see no compelling reason to switch from regular OTP codes, change my mind.


Replies

Gander5739 • today at 3:56 PM

> Right now I see no compelling reason to switch from regular OTP codes. Change my mind.

The phishing potential?

➕ show 1 reply