TLDR InfoSec · MISCELLANEOUS

FIDO ALLIANCE PUBLISHES NEW SPECIFICATIONS TO PROMOTE USER CHOICE AND UX FOR PASSKEYS

fidoalliance.org3 min read

Summary from the TLDR InfoSec newsletter

The FIDO Alliance has published a draft of a new standard for the transfer of credentials (passwords, passkeys, etc) between credential managers securely. Currently, when a user wants to transfer credentials from one credential manager, the transfer generally takes place insecurely in the clear. The draft is not ready for implementation yet and is open for comments on the FIDO Alliance's GitHub page.