skepller@lemmy.world to Programmer Humor@programming.devEnglish · 3 days agoGitHub authlemmy.worldimagemessage-square80linkfedilinkarrow-up1710arrow-down116
arrow-up1694arrow-down1imageGitHub authlemmy.worldskepller@lemmy.world to Programmer Humor@programming.devEnglish · 3 days agomessage-square80linkfedilink
minus-squaretwice_hatch@midwest.sociallinkfedilinkEnglisharrow-up2·1 day agoIf by “passkey” they mean an HSM I’m okay with it I’d still rather have TOTP as my 2nd factor so I don’t have to plug shit in
minus-squarephilosloppy@lemmy.worldlinkfedilinkarrow-up2·12 hours agoTOTP is the superior option, IMO, but I’m no expert on security so maybe they’re insecure? it sure seems like some folks would rather do anything but time-based onetimes. hardware keys are a pain in the neck, just one more thing to be lost.
minus-squareJackbyDev@programming.devlinkfedilinkEnglisharrow-up2·1 day agoI’ve plugged my phone in so many times and it doesn’t detect shit. I’d rather stick with totp/email.
If by “passkey” they mean an HSM I’m okay with it
I’d still rather have TOTP as my 2nd factor so I don’t have to plug shit in
TOTP is the superior option, IMO, but I’m no expert on security so maybe they’re insecure? it sure seems like some folks would rather do anything but time-based onetimes.
hardware keys are a pain in the neck, just one more thing to be lost.
I’ve plugged my phone in so many times and it doesn’t detect shit. I’d rather stick with totp/email.