Skip to main content

nonfunctional.substack.com/p/p

TIL that passkeys have remote attestation built-in. Without a US-American phone running software signed by a US-American company, on which you need to be signed in with your legal identity (thus rendering you unable to use it if you're sanctioned by the US), there is a pretty good chance that you'll be unable to use your passkeys in the future. That seems pretty damn terrible.

Don't use passkeys.

1 Boost
0 Likes