Questions I'm getting about Google's "passkeys" announcement
All, I'm getting a pile of (many confused) questions about Google's
new "passkeys" announcement. Since I wrote "Passwords Must Die!" many
years ago, I cheer these advances ... however ... there are
implications in the implementation that really need to be fully
understood by users, and frankly, given the difficulty in getting
users to use 2-factor authentication, I suspect passkeys adoption will
be complex unless users are forced to use them, which has its own
implications.
Bottom line, I would not urge use of them immediately, unless you are
absolutely convinced that you understand the details, some of which are a
bit opaque right now.
My intention is to blog in some detail on this (and the new Google
Authenticator cloud issues I mentioned previously) as soon as
possible.
Please take care. Best, L
- - -
--Lauren--
Lauren Weinstein
[email protected] (https://www.vortex.com/lauren)
Lauren's Blog: https://lauren.vortex.com
Twitter: https://twitter.com/laurenweinstein
Mastodon: https://mastodon.laurenweinstein.org/@lauren
T2: https://t2.social/laurenweinstein
Founder: Network Neutrality Squad: https://www.nnsquad.org
PRIVACY Forum: https://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility
Tel: +1 (818) 225-2800
_______________________________________________
pfir mailing list
https://lists.pfir.org/mailman/listinfo/pfir
