<html><head></head><body><div class="ydpe86078c0yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div dir="ltr" data-setdir="false">I know the main reason I don't use a password manager or passkeys is the lack of a single, universally applicable way to create and use them at various websites or for various login types. </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Even if you choose to use a dongle like YubiKey or your own FIDO U2F USB key, there are still many competing and incompatible standards out there. And some options have undesirable privacy and security implications.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">For example, I will not log in as Administrator and I will not use a Microsoft Cloud Account login to do banking or financial business. Yet, Microsoft offers no other way to use Passkeys. So much for added "security". </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Wake me up when all of this is sorted out. </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">-- Bob Primak </div><div dir="ltr" data-setdir="false"><br></div><div><br></div>
</div><div id="yahoo_quoted_6199854511" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Thursday, January 2, 2025 at 08:47:42 PM EST, Peter Albin via LCTG <lctg@lists.toku.us> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="yiv6877929477"><div>Good article <div>It highlights transferring one security issue for another </div><div>Like many other technical “solutions “ the secret to acceptance is the user experience <br clear="none" id="yiv6877929477lineBreakAtBeginningOfSignature"><div dir="ltr">Peter</div><div dir="ltr"><br clear="none"><blockquote type="cite">On Jan 2, 2025, at 5:50 PM, Adam Broun via LCTG <lctg@lists.toku.us> wrote:<br clear="none"><br clear="none"></blockquote></div><blockquote type="cite"><div dir="ltr"></div></blockquote></div></div><div>I know we’ve had some good discussions about Passkeys and their advantages. Here’s an article on some drawbacks. tl;dr - it’s not that they’re insecure, it’s that they are implemented in many different ways which makes using them more complicated than they should be.<div><br clear="none"></div><div><div style="display:block;"><div style="display:inline-block;" data-url="https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/" class="yiv6877929477apple-rich-link"><a rel="nofollow noopener noreferrer" shape="rect" dir="ltr" style="border-radius:10px;font-family:-apple-system, Helvetica, Arial, sans-serif;display:block;width:300px;overflow:hidden;text-decoration:none;" target="_blank" href="https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/" class="yiv6877929477lp-rich-link"><div id="yiv6877929477yqtfd43004" class="yiv6877929477yqt7984337268"></div><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:#856C35;font-family:-apple-system, Helvetica, Arial, sans-serif;" cellpadding="0" cellspacing="0" border="0" width="300" class="yiv6877929477lp-rich-link-emailBaseTable"><tbody><tr><td align="center" colspan="1" rowspan="1"><div><passkey-1000x648.jpeg></div></td></tr><tr><td colspan="1" rowspan="1"><table bgcolor="#856C35" cellpadding="0" cellspacing="0" width="300" style="table-layout:fixed;font-family:-apple-system, Helvetica, Arial, sans-serif;background-color:rgba(133, 108, 53, 1);" class="yiv6877929477lp-rich-link-captionBar"><tbody><tr><td colspan="1" rowspan="1" style="padding:8px 0px 8px 0px;" class="yiv6877929477lp-rich-link-captionBar-textStackItem"><div style="max-width:100%;margin:0px 16px 0px 16px;overflow:hidden;" class="yiv6877929477lp-rich-link-captionBar-textStack"><div style="word-wrap:break-word;font-weight:500;font-size:12px;overflow:hidden;text-align:left;" class="yiv6877929477lp-rich-link-captionBar-textStack-topCaption-leading"><a rel="nofollow noopener noreferrer" shape="rect" target="_blank" href="https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/" style="text-decoration:none;"><font color="#FFFFFF" style="color:rgba(255, 255, 255, 0.847059);">Passkey technology is elegant, but it’s most definitely not usable security</font></a></div><div style="word-wrap:break-word;font-weight:400;font-size:11px;overflow:hidden;text-align:left;" class="yiv6877929477lp-rich-link-captionBar-textStack-bottomCaption-leading"><a rel="nofollow noopener noreferrer" shape="rect" target="_blank" href="https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/" style="text-decoration:none;"><font color="#FFFFFF" style="color:rgba(255, 255, 255, 0.54902);">arstechnica.com</font></a></div></div></td></tr></tbody></table></td></tr></tbody></table></a></div></div><div id="yiv6877929477yqtfd76733" class="yiv6877929477yqt7984337268"><br clear="none"></div></div><div id="yiv6877929477yqtfd76044" class="yiv6877929477yqt7984337268"><div><br clear="none"></div><div></div><span>===============================================</span><br clear="none"><span>::The Lexington Computer and Technology Group Mailing List::</span><br clear="none"><span>Reply goes to sender only; Reply All to send to list.</span><br clear="none"><span>Send to the list: LCTG@lists.toku.us Message archives: http://lists.toku.us/pipermail/lctg-toku.us/</span><br clear="none"><span>To subscribe: email lctg-subscribe@toku.us To unsubscribe: email lctg-unsubscribe@toku.us</span><br clear="none"><span>Future and Past meeting information: http://LCTG.toku.us</span><br clear="none"><span>List information: http://lists.toku.us/listinfo.cgi/lctg-toku.us</span></div><br clear="none"><span>This message was sent to palbin24@yahoo.com.</span><br clear="none"><span>Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/palbin24@yahoo.com</span><div id="yiv6877929477yqtfd22207" class="yiv6877929477yqt7984337268"><br clear="none"></div></div></div><div class="yqt7984337268" id="yqtfd28160">===============================================<br clear="none">::The Lexington Computer and Technology Group Mailing List::<br clear="none">Reply goes to sender only; Reply All to send to list.<br clear="none">Send to the list: <a shape="rect" ymailto="mailto:LCTG@lists.toku.us" href="mailto:LCTG@lists.toku.us">LCTG@lists.toku.us</a> Message archives: <a shape="rect" href="http://lists.toku.us/pipermail/lctg-toku.us/" target="_blank">http://lists.toku.us/pipermail/lctg-toku.us/</a><br clear="none">To subscribe: email <a shape="rect" ymailto="mailto:lctg-subscribe@toku.us" href="mailto:lctg-subscribe@toku.us">lctg-subscribe@toku.us</a> To unsubscribe: email <a shape="rect" ymailto="mailto:lctg-unsubscribe@toku.us" href="mailto:lctg-unsubscribe@toku.us">lctg-unsubscribe@toku.us</a><br clear="none">Future and Past meeting information: <a shape="rect" href="http://LCTG.toku.us" target="_blank">http://LCTG.toku.us</a><br clear="none">List information: <a shape="rect" href="http://lists.toku.us/listinfo.cgi/lctg-toku.us" target="_blank">http://lists.toku.us/listinfo.cgi/lctg-toku.us</a><br clear="none">This message was sent to <a shape="rect" ymailto="mailto:bobprimak@yahoo.com." href="mailto:bobprimak@yahoo.com.">bobprimak@yahoo.com.</a><br clear="none">Set your list options: <a shape="rect" href="http://lists.toku.us/options.cgi/lctg-toku.us/bobprimak@yahoo.com" target="_blank">http://lists.toku.us/options.cgi/lctg-toku.us/bobprimak@yahoo.com</a><br clear="none"></div></div>
</div>
</div></body></html>