Hacker News Reader

Wait until websites start demanding device-bound/attested passkeys. Big tech just needs to get enough adoption to make this change.

Nobody is going to do this because Apple’s devices don’t support this for the Passwords app out of the box, by design.

As much as I hate to admit it (because I love passkeys UX), but I do think that device-bound/attested passkeys are going to happen in the future :(

UPD: oh, heck, attested passkeys are actually already in the protocol. Why can't we just have nice things?