you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 days ago

I personally use a self-hosted passkey manager, and I don't see the point of boycotting WebAuthn. Making my account less secure by relying on TOTP exclusively seems like a dangerous trade-off. And whatever amount of user adoption is irrelevant if the Big Web decides to make attested passkeys mandatory.

  • source