> Passkeys fall under the relax of point 3 that @emlun mentioned as they will be synced via iCloud, right? Not sure if this scenario is covered: if I compromise someone's iCloud account and sign in on a new iOS device, wouldn't my faceID unlock passkeys? Yes, that is exactly correct. Compromise of the iCloud account, now compromises all passkeys associated to the account. -- GitHub Notification of comment by Firstyear Please view or discuss this issue at https://github.com/w3c/webauthn/issues/151#issuecomment-1167970549 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-configReceived on Monday, 27 June 2022 22:13:29 UTC
This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:46 UTC