Re: OT: Passkey usage

On 8/13/26 8:00 PM, Tim via users wrote:
> Robert McBroom:
>>> Lots of sites are promoting the use of a generated passkey vs a
>>> password. Some mention of using a passkey generated for site A on site
>>> B. Seems to be tied to the device. How is this better than a password?
> 
> Samuel Sieb:
>> It's more secure in some ways.
> 
>                        ^^^^
> 
> Of course that is all moot if the site has really dumb ideas about
> password/credential resets that lets unauthorised people abuse it, and
> many do.
> 
>>> Doesn't seem to be as useful as a password generator and keeper. The
>>> mechanism for using a passkey on multiple devices is not clear.
> 
>> You generally can't.
> 
> This is one area where it becomes a real pain, and I'll give you a
> real-world example:
> 
> The biggest service provider in Australia, Telstra, decided to require
> passkeys generated by them for email.  *And*, every different device,
> every different application (even on the same device), requires a
> unique passkey to access your mail.  Not that they told their users,
> nor their support staff.  You can't create your own passkey, so you
> could make something that you can remember or be able to type, only
> their pseudo-random thing (that can be another failure, if someone
> figures out how non-random their generator is).
That's not a passkey.  That's just a password generated by them.  I'm 
curious how they determine that the connection is coming from a certain app.

-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new