So Google and Amazon have support, and it seems depening on which AB group you are in Apple does too?
I think it is a significant benefit and likely to be implemented specially concidering client support is already there and there are good libraries available to do it.
Large providers have supported other standards and not seen uptake. I'll believe it if/when it happens.
Lack of understandably is the primary downside of passkeys, and I doubt it will be overcome in this decade. Authentication is like investing, one must understand the options for it to be effective.
There’s plenty of inertia but if you haven’t tried it, the experience on Apple devices is pretty easy to understand and fast: “Do you want to sign in with Face ID for the web?” takes less time than weakening your password to suit some site’s policy, and it’s much faster and easier than dealing with any other form of MFA. At least for sites required to have MFA, that inertia is going to win out faster than we think because ordinary people hate things like TOTP codes and stuff like SMS/email codes will trigger accessibility complaints.
I click a button, my phone/computer asks for biometrics etc and the passkey is loaded.
When more poviders make it a default it will be even better. This isn't like enrolling 2fa, its more akin to hardware tokens without th hassel of carrying around a hardware token...
