WebAuthn: Difference between revisions

Line 170:

== In the media ==

WebAuthn, popularly referred to as "passkeys", has received mixed responses from the public:

* [[Troy Hunt]]: "Passkeys are one of the few security constructs that make your life easier, rather than harder."<ref name="troyhunt">{{Cite web |last=Hunt |first=Troy |date=2025-05-05 |title=Passkeys for Normal People |url=https://www.troyhunt.com/passkeys-for-normal-people/ |access-date=2025-08-13 |website=Troy Hunt |language=en |archive-date=13 May 2025 |archive-url=https://web.archive.org/web/20250513190543/https://www.troyhunt.com/passkeys-for-normal-people/ |url-status=live }}</ref> "That's a one-click sign-in, and clicking the purple button immediately grants me access to my account."<ref name="troyhunt"/>

* "Passkeys are one of the few security constructs that make your life easier, rather than harder."<ref name="troyhunt">{{Cite web |last=Hunt |first=Troy |date=2025-05-05 |title=Passkeys for Normal People |url=https://www.troyhunt.com/passkeys-for-normal-people/ |access-date=2025-08-13 |website=Troy Hunt |language=en |archive-date=13 May 2025 |archive-url=https://web.archive.org/web/20250513190543/https://www.troyhunt.com/passkeys-for-normal-people/ |url-status=live }}</ref>~~{{dash}}Troy Hunt – 5 May 2025~~

* Dan Goodin: "Passkey technology is elegant, but it’s most definitely not usable security."<ref name="arstechnica-not-usable" />

* [[Bruce Davie]]: "...the implementation seems to have failed the 'make it easy for users' test, which in my view is the whole point of passkeys. I have been using [[public key cryptography]] for 30-plus years... If I find passkeys confusing to use, it doesn’t bode well for more typical users."<ref>{{Cite news |last=Davie |first=Bruce |date=2024-11-17 |title=Will passkeys ever replace passwords? Can they? |url=https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-url=https://web.archive.org/web/20250725180037/https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-date=25 July 2025 |access-date=2025-08-13 |work=[[The Register]] |language=en |url-status=live }}</ref>

~~<blockquote>~~That's a one-click sign-in, and clicking the purple button immediately grants me access to my account.<ref name="troyhunt"></~~ref~~>~~</blockquote>~~

*"Passkey technology is elegant, but it’s most definitely not usable security"<ref name="arstechnica-not-usable" />~~{{dash}}Dan Goodin – 30 December 2024~~ [[~~Ars Technica~~]]

*"...the implementation seems to have failed the "make it easy for users" test, which in my view is the whole point of passkeys. I have been using [[public key cryptography]] for 30-plus years...If I find passkeys confusing to use, it doesn’t bode well for more typical users."<ref>{{Cite news |last=Davie |first=Bruce |date=2024-11-17 |title=Will passkeys ever replace passwords? Can they? |url=https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-url=https://web.archive.org/web/20250725180037/https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-date=25 July 2025 |access-date=2025-08-13 |work=[[The Register]] |language=en |url-status=live }}</ref>~~{{dash}}Bruce Davie – 17 November 2024 [[The Register]]~~

== See also ==

@@ Line 170: / Line 170: @@
 == In the media ==
 WebAuthn, popularly referred to as "passkeys", has received mixed responses from the public:
+* [[Troy Hunt]]: "Passkeys are one of the few security constructs that make your life easier, rather than harder."<ref name="troyhunt">{{Cite web |last=Hunt |first=Troy |date=2025-05-05 |title=Passkeys for Normal People |url=https://www.troyhunt.com/passkeys-for-normal-people/ |access-date=2025-08-13 |website=Troy Hunt |language=en |archive-date=13 May 2025 |archive-url=https://web.archive.org/web/20250513190543/https://www.troyhunt.com/passkeys-for-normal-people/ |url-status=live }}</ref> "That's a one-click sign-in, and clicking the purple button immediately grants me access to my account."<ref name="troyhunt"/>
-* "Passkeys are one of the few security constructs that make your life easier, rather than harder."<ref name="troyhunt">{{Cite web |last=Hunt |first=Troy |date=2025-05-05 |title=Passkeys for Normal People |url=https://www.troyhunt.com/passkeys-for-normal-people/ |access-date=2025-08-13 |website=Troy Hunt |language=en |archive-date=13 May 2025 |archive-url=https://web.archive.org/web/20250513190543/https://www.troyhunt.com/passkeys-for-normal-people/ |url-status=live }}</ref>{{dash}}Troy Hunt – 5 May 2025
+* Dan Goodin: "Passkey technology is elegant, but it’s most definitely not usable security."<ref name="arstechnica-not-usable" />
+* [[Bruce Davie]]: "...the implementation seems to have failed the 'make it easy for users' test, which in my view is the whole point of passkeys. I have been using [[public key cryptography]] for 30-plus years... If I find passkeys confusing to use, it doesn’t bode well for more typical users."<ref>{{Cite news |last=Davie |first=Bruce |date=2024-11-17 |title=Will passkeys ever replace passwords? Can they? |url=https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-url=https://web.archive.org/web/20250725180037/https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-date=25 July 2025 |access-date=2025-08-13 |work=[[The Register]] |language=en |url-status=live }}</ref>
-<blockquote>That's a one-click sign-in, and clicking the purple button immediately grants me access to my account.<ref name="troyhunt"></ref></blockquote>
-*"Passkey technology is elegant, but it’s most definitely not usable security"<ref name="arstechnica-not-usable" />{{dash}}Dan Goodin – 30 December 2024 [[Ars Technica]]
-*"...the implementation seems to have failed the "make it easy for users" test, which in my view is the whole point of passkeys. I have been using [[public key cryptography]] for 30-plus years...If I find passkeys confusing to use, it doesn’t bode well for more typical users."<ref>{{Cite news |last=Davie |first=Bruce |date=2024-11-17 |title=Will passkeys ever replace passwords? Can they? |url=https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-url=https://web.archive.org/web/20250725180037/https://www.theregister.com/2024/11/17/passkeys_passwords/ |archive-date=25 July 2025 |access-date=2025-08-13 |work=[[The Register]] |language=en |url-status=live }}</ref>{{dash}}Bruce Davie – 17 November 2024 [[The Register]]
 == See also ==

WebAuthn: Difference between revisions

wikipedia>Mikhail Ryazanov