privacy

Is the future of Passkey safe?

Not allowing the users to turn on ADP in the UK undermines many of the security guarantees of using Passkeys for auth and blob storage when that feature is enabled.

I think Govs to with a court order could impersonate Passkey based operations.

@cassie I'm curious to hear your thoughts on this, do you still trust Passkey?

Do any casters happen to know how Google backs up Passkeys?
Can't find any decent info on the subject.

I believe it's still some version of this: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html

tldr: Random key generated on-device, then encrypted using device passcode, then sent to Google and locked in their Titan security enclave thing.