p0seidon

This is incredible. I wonder when an LLM will pull this knowledge out to help someone down the line who would never have had the craft to pull this off, as it requires so much depth and broad skill. Admirable.

Would this yield exactly the same behavior when thinking about sub-agents and all this functionality?

When building, did you not have the thought or feeling that you would prefer the actual Claude Code and Codex harness to run, rather than just the SDKs also for your Agents?

Which post was that?

Enjoyed reading it

This is such a well-written read, just so insightful and broad in its knowledge. I learned a lot, thank you (loved NT at that time - now I know why).

This rant is utterly factless and at an absolute novice level. It is correct that building a passkey-first system (without fallbacks) is not possible today, but that's like going all in on Google Social login and then ranting about why not all users can access the system.

Exactly, the average consumer is the most vulnerable in this landscape. Passkeys, in particular, seem like a promising solution to simplify authentication and protect average consumers. With better integration across platforms, could passkeys be the bridge that balances security and convenience for the 'average consumer' without requiring them to be privacy or tech experts? Most of them share much more valuable information in the cloud already (from privacy perspective)…

You're right about the growing friction between security and user experience, especially with the increasing sophistication of threats. However, if we don’t move towards more seamless & secure authentication methods, won’t we risk stagnating in terms of security? The average consumer is at risk, the privacy-savvy user can avoid that easily, the question is how do we help the "average consumer"?

It could be combined, there are solutions to that.

I guess from a tech perspective, we can now create solid connections between clouds and consumer accounts without the need for social logins (device/cloud -> websites). We will be flying to Mars and have self-driving cars, yet we still have to juggle passwords and password managers.

I think passkeys will bring us automatic authentication, where you can establish an automatic login with consent across all operating systems. The operating system would silently log you in the background. Do you think this could lead to privacy discussions, even if it adds security?

On which two devices?

That is the next interesting point. At the moment, you are right; there is no third-party password manager support on Windows. However, when they integrate synced passkeys, they might offer that. I think, until now, there has been no strategic value in leveraging access management for customers. Once you have a passkey in your cloud, you have a connection with a website forever (unless you revoke it). The future is an automatic login via passkeys (with user consent, of course).

What changed: Apple & Google want to enter deeper into customer connection and at the same time offer a more secure and convenient authentication for their customers.

I am one of the Co-founders. We have heard from members of the FIDO2 community who are closer to Apple that this will probably happen. You are right that Apple could also be positioned more as a password manager on other platforms; we have considered this. However, this is not how most people currently perceive it.

Google releasing this functionality to production is relatively new for those outside the passkey community, although it is not surprising when following Chrome Dev.

Overall, the tendency of Apple and Google to focus on passkeys for consumers and make them accessible is an interesting angle. In our blog, we frequently discuss password managers; in fact, we are also 1Password customers. Passage is a part of 1Password that operates in the same field as we do, likely because they recognize a potential threat from Apple and Google in the consumer space.

For companies implementing passkeys this is quite a significant change, because now a Chrome can carry a passkey that used to be a cross-device case before. The ecosystem is getting more complicated...

I think you are right for the moment; maybe now they will put in more effort?

same

This is 100% the reality

> Also, if devs "want!" native components for React, Vue, etc., that does not mean Web components are bad, that only means devs want native components for their FW :).

You are right. For transparency, I also work for Corbado and was part of the discussion. I think most of the developers prefer a native component if they have a framework in use. In this case, because of the SSR trend, it's just a bit more difficult to use web components as a base for all of them. Would you not agree? Of course, you could offer native implementation in all variants, but that's very difficult.

I love how this response corresponds to your profile description, and I mean that in a positive way, just to be clear.

This thread is more entertaining than both TikTok and Netflix combined, which is truly exceptional.

Agree.

I think it is common, especially early in a career, that it is more important to approach people proactively. There is a barrier to asking for help. It can be quite challenging if you are new and maybe a bit shy (not uncommon, as we know, in the STEM field) to get the most out of it. Just sharing my experience, not saying it's impossible.

I would actually agree with that, notwithstanding what I have written. I still think the learning curve can be steeper in that case and actually more fun.

I rather meant to teach them stuff... It's not for everybody, but a substantial part of engineers, I would think, really enjoy teaching and passing on their experience and know-how. That's not only limited to engineers, of course.

Well, not everybody, but it's quite powerful to be around people who actually care in person about how you are doing. It's a beautiful dynamic. It depends on the actual company and situation, but yes, there are people who find it quite depressing to get a MacBook sent to their home address and never experience a great office. I'm not saying it's the only way. I can understand WFH is extremely practical for most people with kids. At the same time, it deprives people starting their careers of fast learning experiences. There are plenty of examples of extremely successful remote-only companies that attract young talent, but there are also examples of the opposite.

The picture at the start of the article just says it all. I was just looking at it for minutes and didn't dare to scroll down.

In my experience, the problem is that junior, extremely motivated people, who are often the ones doing the impactful work, cannot thrive and learn from experienced people in WFH environments.

Probably depends on the role if it needs creative interaction.

I agree, but: The best thing about this is that the work is actually done by a small number of people instead of an overengineered system with a custom-solution. The thriller is great, but also the efficiency powering all of Netflix CDNs is refreshing.