|
Top-level
 @nikitonsky Never seen such a password manager. Also: passwords might get sniffed. With passkeys, you need to hijack the communication channel, because of the challenge/response nature (but I'm no expert). However, the difference between passwords and passkeys might be more applicable to "normal" users (although even experts get phished sometimes). 2 comments
@nikitonsky I'm not in favour of passkeys. The passkey on GitHub doesn't work anymore for some reason (yubikey does work). However, passwords have problems. They can be stolen (and you only notice it when it's too late). Password managers are not fool proof. I use Safari, and that's probably the worst offender. But my girlfriend uses Chrome’s, and it just doesn't work all the time. 1/2 |
Gregory's Server
@doekman I mean, what password manager gives you:
- Unique password per site
- Good randomness and length
- Site identity check (if you are at fishing site it won’t find the password)
- Most of the time, you don’t see the passwords
But I like signing the challenge part instead of sending entire password. That’s the part password managers don't give you