6 ms·

"Passkeys will be importable and exportable, cross-device, and across passkey managers. They aren’t at this time, but they will be. It’s something that’s being

by mfwit 3y ago

"Passkeys will be importable and exportable, cross-device, and across passkey managers. They aren’t at this time, but they will be. It’s something that’s being defined and designed." -Apple Authentication Experience manger https://hachyderm.io/@rmondello/110329118270492669 https://hachyderm.io/@rmondello/110329118270492669

dv_dt 3y ago
Until Google, or Apple, or facebook, or whoever is the passkey store holder decides to put up an interoperability wall, either through neglect, cost savings, or intentional user retention. The big providers could provide cross company SSO (e.g. sign onto my google mail account w/ my apple identity) for all their accounts already, but for some reason that hasn't happened...
josephcsible 3y ago
I'll believe this when it actually happens and I can audit the whole implementation stack myself. Until then, I trust Apple about as far as I can throw them. Remember when they got sued for lying in ads and their defense was "no reasonable person in Plaintiff's position could have reasonably relied on or misunderstood Apple's statements as claims of fact"? https://www.wired.com/2008/12/apple-says-cust/ https://www.wired.com/2008/12/apple-says-cust/
Mindwipe 3y ago
"Now, FaceTime is based on a lot of open standards -- H.264 video, AAC audio, and a bunch of alphabet soup acronyms -- and we're going to take it all the way. We're going to the standards bodies starting tomorrow, and we're going to make FaceTime an open industry standard." - Steve Jobs.
AlexandrB 3y ago
It's great that they're aiming for this, but there's no reason to take them at their word until they actually ship something. Also, considering that there are already multiple software vendors providing passkey hosting functionality, it seems a little late to start designing the "cross-device, and across passkey managers" part of this. If it's not in the standard already, what assurance does a user have that any of these third-party entities will implement it?

by mfwit 3y ago

dv_dt 3y ago

Until Google, or Apple, or facebook, or whoever is the passkey store holder decides to put up an interoperability wall, either through neglect, cost savings, or intentional user retention. The big providers could provide cross company SSO (e.g. sign onto my google mail account w/ my apple identity) for all their accounts already, but for some reason that hasn't happened...

josephcsible 3y ago

I'll believe this when it actually happens and I can audit the whole implementation stack myself. Until then, I trust Apple about as far as I can throw them. Remember when they got sued for lying in ads and their defense was "no reasonable person in Plaintiff's position could have reasonably relied on or misunderstood Apple's statements as claims of fact"? https://www.wired.com/2008/12/apple-says-cust/ https://www.wired.com/2008/12/apple-says-cust/

Mindwipe 3y ago

"Now, FaceTime is based on a lot of open standards -- H.264 video, AAC audio, and a bunch of alphabet soup acronyms -- and we're going to take it all the way. We're going to the standards bodies starting tomorrow, and we're going to make FaceTime an open industry standard." - Steve Jobs.

AlexandrB 3y ago

It's great that they're aiming for this, but there's no reason to take them at their word until they actually ship something. Also, considering that there are already multiple software vendors providing passkey hosting functionality, it seems a little late to start designing the "cross-device, and across passkey managers" part of this. If it's not in the standard already, what assurance does a user have that any of these third-party entities will implement it?