The FIDO Alliance (who wrote the WebAuthn spec with the W3C) has a draft specifi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

shellcromancer on May 14, 2025 | parent | context | favorite | on: The cryptography behind passkeys

The FIDO Alliance (who wrote the WebAuthn spec with the W3C) has a draft specification for a format (Credential Exchange Format) and protocol (Credential Exchange Protocol) for migrating passkeys and other credentials [1]. I don't think this is implemented by any providers yet, but it's being worked on.

[1] https://fidoalliance.org/specifications-credential-exchange-...

conradev on May 15, 2025 [–]

The big remaining issue in my mind is this one:

https://github.com/fido-alliance/credential-exchange-feedbac...

I am worried about providers blocking exports “because security”. That’s Apple’s favorite argument

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact