shell.online 0.13.0 Lets a Passkey Unlock the Session Vault. A WebAuthn Editor Begged Developers Not To. Here Is What It Costs.
This story is from 2026-09-12. It is preserved in the archive; the latest stories are on the live feed.
Tim Cappalli co-edits the WebAuthn specification. On February 27 he published a post titled "Please, please, please stop using passkeys for encrypting user data" . The argument fits in one sentence of his: "When you overload a credential used for authentication by also using it for encryption, the…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-12 20:35 · DEV Community — AI
shell.online 0.13.0 Lets a Passkey Unlock the Session Vault. A WebAuthn Editor Begged Developers Not To. Here Is What It Costs.