MERCARI’S PASSKEY ADOPTION

Summary from the TLDR InfoSec newsletter

Mercari discusses the considerations that went into the design of its passkey implementation. The company chose to adopt passkeys to try to create a phishing-resistant environment. Complications encountered included issues preventing attackers from registering passkeys, problems syncing passkeys, and UX difficulties around using passkeys.