TLDR InfoSec · MISCELLANEOUS

PASSKEYS: A SHATTERED DREAM

links.tldrnewsletter.com6 min read

Summary from the TLDR InfoSec newsletter

A post from the maintainer of the webauthn-rs library on why they believe that passkeys will ultimately fail. The author lays out their original hopes for webauthn and why we failed to get there. Reasons for the failure of passkeys include corporations acting in their own self-interest, anti-open source behaviors, and messy implementations ruining the user experience around passkeys.