Comment

Comment by palata

I'm a bit confused: how does signCount ever bring security in a shared-passkey scenario?

The only way I can see it be useful is if you have exactly one instance of the passkey (e.g. a security key), because if `signCount` got incremented without the security key being aware of it, then you have a problem.

parent palata 1 year ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton