▲ 901 ▼ Stop Treating Phone Numbers As A Digital ID (notthesolution.substack.com) submitted 2 years ago by formerlytomato@lemmy.sdf.org to c/technology@lemmy.world 157 comments fedilink hide all child comments
[+] IDKWhatUsernametoPutHereLolol@lemmy.dbzer0.com 34 points 2 years ago* (last edited 1 year ago) (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] Kusimulkku@lemm.ee 24 points 2 years ago (2 children) I'm already hearing about restrictions on exporting passkeys and some apps requiring that you're not running a custom ROM on Android and stuff like that. Makes me worried they're going to fuck that up and make it restrictive bs permalink fedilink source parent hideshow 4 child comments replies: [–] Korhaka@sopuli.xyz 6 points 2 years ago (2 children) Why should my OS be any of their concern? permalink fedilink source parent hideshow 4 child comments replies: [–] RogueBanana@lemmy.zip 5 points 2 years ago (1 child) From what I heard passkeys need google services framework for some reason. Don't know technical reasons behind it but I would assume its bs given its google. permalink fedilink source parent hideshow 2 child comments replies: [–] dracs@programming.dev 3 points 2 years ago Yes, they don't work without Google Play Services. Google didn't implement passkeys in Android, only their own services. permalink fedilink source parent [–] Kusimulkku@lemm.ee 2 points 2 years ago (1 child) I'm living this pain with a custom ROM already, with some banking stuff, Google Wallet, WhatsApp passkeys and I think Netflix (haven't installed it) block you for tripping up Google's security tests. If passkeys become a big thing and they'll start enforcing them and apps that have those security measures I'm going to fucking firebomb something. REEEEEE permalink fedilink source parent hideshow 2 child comments replies: [–] Korhaka@sopuli.xyz 2 points 2 years ago Shit like this is why I don't have a smartphone anymore. I have a brick phone that half the time I don't even take out with me. permalink fedilink source parent [–] lmmarsano@lemmynsfw.com 3 points 2 years ago Passkeys or WebAuthn are an open web standard, and the implementation is flexible. An authenticator can be implemented in software, with a hardware system integrated into the client device, or off-device. Exportability/portability of the passkey is up to the authenticator. Bitwarden already exports them, and other authenticators likely do, too. WebAuthn relying parties (ie, web applications) make trust decisions by specifying characteristics of eligible authenticators & authentication responses & by checking data reported in the responses. Those decisions are left to the relying party's discretion. I could imagine locked-down workplace environments allowing only company-approved configurations connect to internal systems. WebAuthn has no bearing on whether an app runs on a custom platform: that's entirely on the developer & platform capabilities to reveal customization. permalink fedilink source parent
[–] Kusimulkku@lemm.ee 24 points 2 years ago (2 children) I'm already hearing about restrictions on exporting passkeys and some apps requiring that you're not running a custom ROM on Android and stuff like that. Makes me worried they're going to fuck that up and make it restrictive bs permalink fedilink source parent hideshow 4 child comments replies: [–] Korhaka@sopuli.xyz 6 points 2 years ago (2 children) Why should my OS be any of their concern? permalink fedilink source parent hideshow 4 child comments replies: [–] RogueBanana@lemmy.zip 5 points 2 years ago (1 child) From what I heard passkeys need google services framework for some reason. Don't know technical reasons behind it but I would assume its bs given its google. permalink fedilink source parent hideshow 2 child comments replies: [–] dracs@programming.dev 3 points 2 years ago Yes, they don't work without Google Play Services. Google didn't implement passkeys in Android, only their own services. permalink fedilink source parent [–] Kusimulkku@lemm.ee 2 points 2 years ago (1 child) I'm living this pain with a custom ROM already, with some banking stuff, Google Wallet, WhatsApp passkeys and I think Netflix (haven't installed it) block you for tripping up Google's security tests. If passkeys become a big thing and they'll start enforcing them and apps that have those security measures I'm going to fucking firebomb something. REEEEEE permalink fedilink source parent hideshow 2 child comments replies: [–] Korhaka@sopuli.xyz 2 points 2 years ago Shit like this is why I don't have a smartphone anymore. I have a brick phone that half the time I don't even take out with me. permalink fedilink source parent [–] lmmarsano@lemmynsfw.com 3 points 2 years ago Passkeys or WebAuthn are an open web standard, and the implementation is flexible. An authenticator can be implemented in software, with a hardware system integrated into the client device, or off-device. Exportability/portability of the passkey is up to the authenticator. Bitwarden already exports them, and other authenticators likely do, too. WebAuthn relying parties (ie, web applications) make trust decisions by specifying characteristics of eligible authenticators & authentication responses & by checking data reported in the responses. Those decisions are left to the relying party's discretion. I could imagine locked-down workplace environments allowing only company-approved configurations connect to internal systems. WebAuthn has no bearing on whether an app runs on a custom platform: that's entirely on the developer & platform capabilities to reveal customization. permalink fedilink source parent
[–] Korhaka@sopuli.xyz 6 points 2 years ago (2 children) Why should my OS be any of their concern? permalink fedilink source parent hideshow 4 child comments replies: [–] RogueBanana@lemmy.zip 5 points 2 years ago (1 child) From what I heard passkeys need google services framework for some reason. Don't know technical reasons behind it but I would assume its bs given its google. permalink fedilink source parent hideshow 2 child comments replies: [–] dracs@programming.dev 3 points 2 years ago Yes, they don't work without Google Play Services. Google didn't implement passkeys in Android, only their own services. permalink fedilink source parent [–] Kusimulkku@lemm.ee 2 points 2 years ago (1 child) I'm living this pain with a custom ROM already, with some banking stuff, Google Wallet, WhatsApp passkeys and I think Netflix (haven't installed it) block you for tripping up Google's security tests. If passkeys become a big thing and they'll start enforcing them and apps that have those security measures I'm going to fucking firebomb something. REEEEEE permalink fedilink source parent hideshow 2 child comments replies: [–] Korhaka@sopuli.xyz 2 points 2 years ago Shit like this is why I don't have a smartphone anymore. I have a brick phone that half the time I don't even take out with me. permalink fedilink source parent
[–] RogueBanana@lemmy.zip 5 points 2 years ago (1 child) From what I heard passkeys need google services framework for some reason. Don't know technical reasons behind it but I would assume its bs given its google. permalink fedilink source parent hideshow 2 child comments replies: [–] dracs@programming.dev 3 points 2 years ago Yes, they don't work without Google Play Services. Google didn't implement passkeys in Android, only their own services. permalink fedilink source parent
[–] dracs@programming.dev 3 points 2 years ago Yes, they don't work without Google Play Services. Google didn't implement passkeys in Android, only their own services. permalink fedilink source parent
[–] Kusimulkku@lemm.ee 2 points 2 years ago (1 child) I'm living this pain with a custom ROM already, with some banking stuff, Google Wallet, WhatsApp passkeys and I think Netflix (haven't installed it) block you for tripping up Google's security tests. If passkeys become a big thing and they'll start enforcing them and apps that have those security measures I'm going to fucking firebomb something. REEEEEE permalink fedilink source parent hideshow 2 child comments replies: [–] Korhaka@sopuli.xyz 2 points 2 years ago Shit like this is why I don't have a smartphone anymore. I have a brick phone that half the time I don't even take out with me. permalink fedilink source parent
[–] Korhaka@sopuli.xyz 2 points 2 years ago Shit like this is why I don't have a smartphone anymore. I have a brick phone that half the time I don't even take out with me. permalink fedilink source parent
[–] lmmarsano@lemmynsfw.com 3 points 2 years ago Passkeys or WebAuthn are an open web standard, and the implementation is flexible. An authenticator can be implemented in software, with a hardware system integrated into the client device, or off-device. Exportability/portability of the passkey is up to the authenticator. Bitwarden already exports them, and other authenticators likely do, too. WebAuthn relying parties (ie, web applications) make trust decisions by specifying characteristics of eligible authenticators & authentication responses & by checking data reported in the responses. Those decisions are left to the relying party's discretion. I could imagine locked-down workplace environments allowing only company-approved configurations connect to internal systems. WebAuthn has no bearing on whether an app runs on a custom platform: that's entirely on the developer & platform capabilities to reveal customization. permalink fedilink source parent