Joelk111 comments on I don't like passkeys

Technology

88,825 readers

14,646 active

3,851 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

moderators

[–] Joelk111@lemmy.world 2 points 2 weeks ago (4 children)

The best implementation of this I've seen has to be Ghost, an open source self-hostable newsletter/patreon thing. They detect what email provider you have and when you enter your email, will display a link to open your inbox. It's super neat, and I haven't seen it anywhere else, and I'm also not sure how they do it. For something self-hostable, I'll definitely take one less attack vector.

permalink

fedilink

source

parent

hideshow 4 child comments

[–] Natanael@infosec.pub 3 points 2 weeks ago (1 child)

A DNS lookup on a domain says who runs the email server for email users on that domain (that's how email senders figures out how to send you messages), and if that host is a known one then you can just pull the link to show. If you're self hosting email then a few solutions can be recognized and login shown by guessing that the email software's default URL pattern is used.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Joelk111@lemmy.world 1 point 2 weeks ago

I figured it was something like that, thanks for the explanation!

permalink

fedilink

source

parent