logoalt Hacker News

davexunit • today at 3:50 PM • 1 reply • view on HN

I don't use passkeys but the thing that raised a red flag for me while reading the article that the OP is responding to is the "non-copyable" property. It's not possible to prohibit delegation[0], so the idea that a key can only be used on one specific device necessarily involves a form of DRM/wishful thinking.

[0] http://www.erights.org/elib/capability/delegations.html


Replies

hedora • today at 4:15 PM

The entire point of passkeys is to force DRM onto all corners of the web. It lets sites require attestation of the software running on the client device. Once they use that to eliminate hardware and operating system competition, they’ll ramp up surveillance and censorship even higher than current windows levels.

Passkeys are the second prong of the age verification push.

If you want more evidence, read up on Project 2025’s plans for forcing the internet to adhere to American Christian Nationalist values, then try to figure out how that could work in the absence of passkeys.

➕ show 2 replies