First screen, captured .
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
934 points by laurex | 482 comments
A Substack essay for non-technical readers arguing that passkeys serve platform interests over users and advising people not to adopt them.
634 points by xena | 383 comments
Blog post arguing that passkey hype and reliance on resident/discoverable credentials will exhaust limited storage on hardware security keys, making them obsolete.
399 points by ksec | 532 comments
A post on X by Nikita Bier arguing that passkeys were designed by security engineers without understanding how ordinary consumers think.
676 points by ethanhawksley | 665 comments
A personal blog post by Ethan Hawksley explaining why he dislikes passkeys and the tech industry's push to make users adopt them.
461 points by ahlCVA | 106 comments
Blog post by Matthew McPherrin describing factoring the RSA keys of a 1990s-era certificate authority and what it says about RSA security.
489 points by donohoe | 554 comments
Google Keyword blog post announcing the rollout of passkeys for Google accounts as a step toward a passwordless future.