Comment

Comment by somerandom2407

The people don't care enough to bother, and that's fine - it's not your (or my) place to force other people to do anything.

My point was not about getting critical mass, it's that the service can already do anything they like to lock people into whatever they want and gatekeep their service. They can do it with Passkeys, or they can do it with a proprietary alternative and if they're big enough, they'll get away with it. Neither of us can sway them at all - I wasn't saying they should do this, only that they can.

Blaming Passkeys is aiming at the wrong target. Passkeys rightly offer features that have valid use-cases, even the attestation in the right context. Can they be abused? Probably, but so can just about anything. Passkeys do, on the other hand, offer some real tangible benefits that other mainstream solutions do not.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton