skepller@lemmy.world to Programmer Humor@programming.devEnglish · 1 year agoGitHub authlemmy.worldimagemessage-square79linkfedilinkarrow-up1731arrow-down117
arrow-up1714arrow-down1imageGitHub authlemmy.worldskepller@lemmy.world to Programmer Humor@programming.devEnglish · 1 year agomessage-square79linkfedilink
minus-squaretwice_hatch@midwest.sociallinkfedilinkEnglisharrow-up2·1 year agoIf by “passkey” they mean an HSM I’m okay with it I’d still rather have TOTP as my 2nd factor so I don’t have to plug shit in
minus-squareJackbyDev@programming.devlinkfedilinkEnglisharrow-up2·1 year agoI’ve plugged my phone in so many times and it doesn’t detect shit. I’d rather stick with totp/email.
minus-squarephilosloppy@lemmy.worldlinkfedilinkarrow-up2·1 year agoTOTP is the superior option, IMO, but I’m no expert on security so maybe they’re insecure? it sure seems like some folks would rather do anything but time-based onetimes. hardware keys are a pain in the neck, just one more thing to be lost.
If by “passkey” they mean an HSM I’m okay with it
I’d still rather have TOTP as my 2nd factor so I don’t have to plug shit in
I’ve plugged my phone in so many times and it doesn’t detect shit. I’d rather stick with totp/email.
TOTP is the superior option, IMO, but I’m no expert on security so maybe they’re insecure? it sure seems like some folks would rather do anything but time-based onetimes.
hardware keys are a pain in the neck, just one more thing to be lost.