Post

between passkeys and webp i’m starting to think that software consumers just hate good things

i think it would go a lot better if they tried explaining them instead of user-hostile flows like i’ve seen where it basically just demands you add a passkey without any context (amazon does this)

like users do hate good things but the passkey rollout has not been executed well at all lol webp is different that’s just client apps not catching up to a format that’s been around for a decade for no reason (including bluesky, as i found out accidentally getting a webp in my profile record)

also some websites let you make multiple passkeys (good, theyre device specific), but then with tailscale i am pretty sure my account is locked to One passkey, i can’t add any more, no options to fix this, so it’s stuck in my single password manager. fun shit

this is so fucking insane and i hate it. i’d mind it less if it wasn’t locking me to my current password manager, but im pretty sure they’re not portable????

you can migrate to a different OIDC provider unless your current provider is apple or github, and you can’t migrate to apple or github from another provider

no idea why this is the case, cc @apenwarr.ca

They can be, but there are a lot of variables. Like, iOS 23 has the ability to export passkeys from one app to import into another, but both apps need to support it. Bitwarden's exports contain the passkeys, but importing them to the new provider may/may not work

I talk about this a bit here but I need to get around to updating the page with the latest status: authomnibus.com/authenticati... Was waiting for Android to actually roll out their passkey transfer feature