libewa@feddit.org to Privacy@lemmy.ml · 23 days agoPasskeys are not a trap. Use them!hachyderm.ioexternal-linkmessage-square162fedilinkarrow-up137file-textcross-posted to: linux@lemmy.ml
arrow-up137external-linkPasskeys are not a trap. Use them!hachyderm.iolibewa@feddit.org to Privacy@lemmy.ml · 23 days agomessage-square162fedilinkfile-textcross-posted to: linux@lemmy.ml
minus-squareSecureTaco@lemmy.asc6.orglinkfedilinkEnglisharrow-up9·23 days agoPhished doesn’t mean just a plain old phone call or email these days. It can still happen, and does. But there are now reverse proxy systems that clone legit web pages to steal TOTP by appearing legit, and they’re highly successful.
minus-squarelemmur420@lemmy.mllinkfedilinkarrow-up2·23 days agoI didn’t know of this, I still prefer the control TOTP gives you but yeah, that makes an argument for the passkeys I guess.
Phished doesn’t mean just a plain old phone call or email these days. It can still happen, and does. But there are now reverse proxy systems that clone legit web pages to steal TOTP by appearing legit, and they’re highly successful.
I didn’t know of this, I still prefer the control TOTP gives you but yeah, that makes an argument for the passkeys I guess.