[f30e3dfed1c9]

FWIW, I think the article "Passkeys: they're not perfect but they're getting better" at the NCSC web site is a pretty fair assessment of the current state of things.

I certainly understand and appreciate the benefits of key-based authentication: been using ssh keys for decades, wouldn't go back to password auth in that context for anything.

But I don't really see passkeys in the much wider context of web authentication for the broadest possible audience has having all the kinks worked out yet.