Boosted by @trending@homestead.social
RE: https://mastodon.social/@pojntfx/117425605598388134
people have tried to explain passkeys to me but my little noob monkey brain always ended up with "but that just sounds like a password, and we already have those" and it is one of the rare wins where my brain protected me at the cognitive layer where it refused to even allow an idea that i don't need to be thought.
edit: i have tried to do things to avoid people coming here to explain passkeys to me that would avoid notifying everyone by editing the top post, but they are not working, so i am editing the top post to say please do not explain passkeys to me.
Quoting
https://nonfunctional.substack.com/p/passkeys-are-a-trap-do-not-use-them
TIL that passkeys have remote attestation built-in. Without a US-American phone running software signed by a US-American company, on which you need to be signed in with your legal identity (thus rendering you unable to use it if you're sanctioned by the US), there is a pretty good chance that you'll be unable to use your passkeys in the future. That seems pretty damn terrible.
Don't use passkeys.
Open quoted post

