Hacker News Reader

> The issue at hand is the requirement for client attestation while using passkeys.

There is no attestation in the consumer synced passkey ecosystem. Period.

Can you say "There will be no attestation in the consumer synced passkey ecosystem. Period."? That seems to be the concern, not what exists today.

Ecosystems are made up of hundreds of thousands of organizations, billions of devices,and billions of users.

How do you expect a single person to be able to make an authoritative statement like that?

Well, you said definitively it's not in the...ecosystem, well of course it's not in that ecosystem now, but that's an extremely narrow reading of the question: the concern is it being in the spec that the consumer-facing ecosystem is pushing hard. A consumer-facing ecosystem that has amply demonstrated how much it loves lock-in. "Fool me once...can't get fooled again"

Reply on news.ycombinator.com