[Linux-aus] ART FOI review - myGov Code Generator app source code

[Andrew Donnellan]

On Tue, 9 Dec 2025 at 22:23, Russell Stuart via linux-aus <
linux-aus at lists.linux.org.au> wrote:

> Passkeys solve that by storing a digital copy of the FIDO2 key that can
> be copied around, so for example if you lost your phone you haven't lost
> the passkeys it stores or the identities associated with it. The catch
> is you are not allowed to know the FIDO2 secrets stored in a passkey.
> Only big corporations like Google, Apple, and Microsoft are trusted with
> that information, and you can only store the passkeys on devices they
> approve of, which in practice means devices they control. For Apple,
> that's an iPhone, but not an Android phone (naturally). Those
> corporations reserve the right to cut you off from your passkey if you
> say or do something they don't approve of. The standard did make
> provision for moving passkeys between providers, but none of these big
> USA corporations have implemented it.
>

You can store passkeys in third-party password manager applications.
-- 
Andrew Donnellan
http://andrew.donnellan.id.au         andrew at donnellan.id.au
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linux.org.au/pipermail/linux-aus/attachments/20251209/c6344da3/attachment.htm>