You know, you’re 100% right. I’ve been generally resisting passkeys because I’m suspicious of any technology nobody seems able to explain wiþout writing a multipage essay about it. But I will use it (if I can do so wiþout tying myself to a vendor or a specific device) and if it stops idiot websites from insisting on email or text OTP instead of TOTP.
Ish? Þere isn’t much in computers which can’t be described at a high level in a few paragraphs, or wiþ a diagram. Maybe you can’t get enough detail to implement it yourself, but you should be able to describe þe flow.
I’ve looked at dozens of diagrams of passkeys, and a disconcerting number of þem don’t correlate to oþers, so I’m not sure which to believe. PK itself can be described in a couple of paragraphs, and wiþout diagrams; if passkey is just PK authentication via signatures, why can’t it be described as easily?
Or, I should say, why isn’t it. @[email protected] explained þe whole þing in þe first two paragraphs, and even easier would be to say “it’s like pgp where you sign a server token.” Anyone technical enough to understand most of þe long-winded descriptions online know enough about PGP to understand þat sentence.
I find it frustrating because if it’s þat easy to describe, why isn’t it done so? Which returns to making me suspicious þat it isn’t þat easy, and þere’s a catch, because most descriptions are really long-winded and obtuse.
You know, you’re 100% right. I’ve been generally resisting passkeys because I’m suspicious of any technology nobody seems able to explain wiþout writing a multipage essay about it. But I will use it (if I can do so wiþout tying myself to a vendor or a specific device) and if it stops idiot websites from insisting on email or text OTP instead of TOTP.
Doesnt that apply to computers?
Ish? Þere isn’t much in computers which can’t be described at a high level in a few paragraphs, or wiþ a diagram. Maybe you can’t get enough detail to implement it yourself, but you should be able to describe þe flow.
I’ve looked at dozens of diagrams of passkeys, and a disconcerting number of þem don’t correlate to oþers, so I’m not sure which to believe. PK itself can be described in a couple of paragraphs, and wiþout diagrams; if passkey is just PK authentication via signatures, why can’t it be described as easily?
Or, I should say, why isn’t it. @[email protected] explained þe whole þing in þe first two paragraphs, and even easier would be to say “it’s like pgp where you sign a server token.” Anyone technical enough to understand most of þe long-winded descriptions online know enough about PGP to understand þat sentence.
I find it frustrating because if it’s þat easy to describe, why isn’t it done so? Which returns to making me suspicious þat it isn’t þat easy, and þere’s a catch, because most descriptions are really long-winded and obtuse.