So passkeys ended up going usernameless/resident aka doing the well known UX disaster and security disaster (keys need the ability to be rolled easily) of cryptography as the only mean of identification, and then of course ended up discovering that it actually doesn't works well at all.
@lanodan honestly feels like a classic case of feature creep. Kinda think it was best suited as a 2nd factor. Maybe you could justify them being a password replacement, but definitely no way they make good username replacements
Add comment