@pojntfx But basically, yes, passkeys are a way to identify you (that is the purpose). The practical implementation by google presumably uses that identification to follow you across all web sites, apps, mail, etc... because that is their business model. That allows advertisers to tailor their offers to the maximum you can pay and the lowest quality you will accept. Again: no secret here.
@pojntfx This also implies that users are not anonymous. One needs a phone number (traceable in most countries) to open a google or apple account (FB as well). They also nudge you for a credit card, the bank obviously knows your name. Even without that, your phone knows your position so it knows where you live and where you work.
And the US government can have US firms terminate the account of a non-US citizen whenever they want.
@dl2jml @pojntfx Why should I open a google or apple account to use #passkeys? There are open source providers like #vaultwarden where you (or your local hacker club or some other association, you trust) can self-host your passkey.
@benedikt @dl2jml @pojntfx you don't need to! you can save your passkeys anywhere you choose. it's an open ecosystem, contrary to what many of these articles like to portray :/
https://whatarepasskeys.info was created to help with some of this.
@benedikt @pojntfx @timcappalli From the link you gave: "Your passkeys are stored in a credential manager, an app or service that syncs them securely across your devices"
which means that they are normally stored on an external computer.
After reading the link in more details, I find out that there are at least 2 systems with which I could run that credential manager on my devices: bitwarden and KeepassXC. I stand corrected.