Don't use passkeys for encrypting user data
zdw Saturday, February 28, 2026
Summary
The article discusses a security vulnerability in the Passkey API's Proof of Possession (PoP) feature, which could allow attackers to impersonate users. The author explains the technical details of the vulnerability and recommends users to update their devices to the latest version to mitigate the issue.
71
31
Summary
blog.timcappalli.me