Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

you were the one that compared it to ssh keys and again: you do not secure root accounts with an ssh keys. Or are you arguing that you should just drop public ssh keys into /root and enable root login?

so how are passkeys are different then ssh keys? there is a private and public key, and if someone gets your private key they get access to everything it unlocks.

they can be sync'd between devices (ie from a secure to compromised), exported, etc exactly like a private ssh key

also i'm not here arguing against passkeys - just pointing out that a long, unique password used in 1 place, that is also not saved anywhere digitally and only exists in my head is going to be more secure then passkeys due to the nature of how they work.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: