Conversation

Notices

1. Embed this notice
   Cassandra 📍 San Francisco (for real!) (xgranade@wandering.shop)'s status on Tuesday, 28-Jul-2026 10:01:26 JST Cassandra 📍 San Francisco (for real!)

   Argh, Nintendo is making it more and more difficult to *not* use passkeys. Which on it's own, fine. But they also don't feature detect correctly and reject any of my browsers on desktop entirely. Plus, I've had any number of sites just not recognize my existing passkeys lately, with (as always) zero actionable error messages.

   I was almost in a good space with all this, but passkey implementations continue to be both exceedingly high-maintenance *and* aggressively forced.

   • Rich Felker repeated this.
   • Embed this notice
     Cassandra 📍 San Francisco (for real!) (xgranade@wandering.shop)'s status on Tuesday, 28-Jul-2026 10:01:25 JST Cassandra 📍 San Francisco (for real!)

     in reply to

     I get why they're forced! Passwords are awful and cause a lot of huge problems!

     But every relying party seems content to exteneralize all the implementation problems onto users and expect that we all become web security experts to just use their fucking sites.

     Which. No.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 28-Jul-2026 10:02:40 JST Rich Felker

     in reply to

     @xgranade Forced passkeys (or any forced choice of authentication method/2FA/etc) represents a failure to understand or respect the range of different models of autonomy and control users have over the devices they use.