[mooreds]

Yeah, I don't think passwords are ever going away (and said it on this podcast[0]).

But for the large group of people in group 2, I'm a big fan of unphishable credentials. If we can figure out the account recovery problem. (Big if!)

0: https://changelog.com/friends/78

[f30e3dfed1c9]

FWIW, I think the article "Passkeys: they're not perfect but they're getting better" at the NCSC web site is a pretty fair assessment of the current state of things.

I certainly understand and appreciate the benefits of key-based authentication: been using ssh keys for decades, wouldn't go back to password auth in that context for anything.

But I don't really see passkeys in the much wider context of web authentication for the broadest possible audience has having all the kinks worked out yet.