All this signing business, leads to one party having the final say, and guess what, they are going to abuse that power...
All this signing business, leads to one party having the final say, and guess what, they are going to abuse that power...
Most security is done badly, but it doesn't mean that security is unnecessary.
But I agree: TooBigTech has TooMuchPower.
Passkeys are here to improve your login security! All you have to do is give complete control over your ability to log in to a service to one of three American big tech companies. Yay!
Many times, people choose TooBigTech. People are generally waaaay too lazy to even consider spending some brain cycles on that.
[1] "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#iss...
More examples here https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-sti...