Embed Notice

@vpz @GossiTheDog @kravietz @PlaneSailingGames

(i)Cloud accounts have been targeted for hijack for quite a long time.

what is the point of cloud-based passkeys?

so I am going to protect myself against hijacking, say, my Github account, but my Apple account stays less protected?

But if I go ahead and buy a real hardware fido key, I can use it for all services, including Github and (probably) Apple, so why bother with the cloud-based solution?