Re: ART FOI review - myGov Code Generator app source code

Andrew Donnellan via linux-aus <[email protected]> Tue, 9 Dec 2025 23:01:46 +1100
Newsgroups gmane.linux.australia
Message-ID <CALn+=Jp_ACF2M=EhtMK8dryfzuWZDqztL=GOg3ntuAgx0awBFQ@mail.gmail.com>
On Tue, 9 Dec 2025 at 22:23, Russell Stuart via linux-aus <
[email protected]> wrote:

> Passkeys solve that by storing a digital copy of the FIDO2 key that can
> be copied around, so for example if you lost your phone you haven't lost
> the passkeys it stores or the identities associated with it. The catch
> is you are not allowed to know the FIDO2 secrets stored in a passkey.
> Only big corporations like Google, Apple, and Microsoft are trusted with
> that information, and you can only store the passkeys on devices they
> approve of, which in practice means devices they control. For Apple,
> that's an iPhone, but not an Android phone (naturally). Those
> corporations reserve the right to cut you off from your passkey if you
> say or do something they don't approve of. The standard did make
> provision for moving passkeys between providers, but none of these big
> USA corporations have implemented it.
>

You can store passkeys in third-party password manager applications.
-- 
Andrew Donnellan
http://andrew.donnellan.id.au         [email protected]

_______________________________________________
linux-aus mailing list
[email protected]
https://lists.linux.org.au/mailman/listinfo/linux-aus

To unsubscribe from this list, send a blank email to
linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org