Hacker News new | past | comments | ask | show | jobs | submit login

> "glaring flaw: you can’t register a Passkey you don’t physically have."

I have Yubikeys and find this frustrating.

Is there not a technical solution that should've happened by now, or is it not as simple as I'm imagining: can't hardware passkeys have a way to export whatever it is that's needed for services to register them (public key/s?) such that if you have 4 keys you can export 4 files to your PC and and time you create an online account just provide all four files at the same time to be registered?

I guess maybe it's not as simple as being a public key that can be registered without the key being around, some sort of active challenge/response needed as part of registration? Or is my imagined solution above completely workable and just overlooked so far?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: