logoalt Hacker News

timmyc123 • today at 4:25 PM • 1 reply • view on HN

> OS-supplied keychain management

That is your choice as the user. You can use the default credential manager that is offered out of box, or you can use your own.

https://whatarepasskeys.info


Replies

stmw • today at 4:41 PM

It's notable that several of the claims on that page conflict with the other info in both the OP article and the follow-on.

As for choice as the user, it's a choice "for now"... and only for users who understand all of these details (which seems unlikely).

Personally, my observation is that if one tries to properly configure 2FA with any major website lately (no, I don't mean AWS console), the level of "your choice" and properly implemented security has actually gotten worse...