[toomuchtodo]

Passwords are a technology. The technology is fundamentally flawed and inherently vulnerable. Those with resources have developed a fix for the vulnerable technology, in accordance with their responsibilities. Developing the standard and deploying passkey support is not free.

If customers want to free ride where they are not exposed to the cost of using weak passwords, or using passwords in general, I would encourage them to find an org willing to eat those identity defense costs. Why should orgs pay the cost for users who want to remain on passwords? Customers are not entitled to weak or vulnerable technology implementations simply because they desire them and there is a material cost versus a more secure technology implementation.

[wryoak]

I don’t think we’re arguing about the same thing anymore, if we ever were