The attestion part only serves to strengthen to Google/Apple duopoly and it should be removed from the standard entirely.
There's also the fact that passkey storage is currently shit. Even the most expensive yubikeys can only store 100 passkeys. I currently have 700+ entries in my password store, and that's excluding the business stuff. Am I supposed to faf about with 8 yubikeys? Somehow labelling them so I know which 100 passkeys each one contains?
There's also the fact that passkey storage is currently shit. Even the most expensive yubikeys can only store 100 passkeys. I currently have 700+ entries in my password store, and that's excluding the business stuff. Am I supposed to faf about with 8 yubikeys? Somehow labelling them so I know which 100 passkeys each one contains?