Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

iinuwa

@iinuwa.fosstodon.org.ap.brid.gy
2 followers 0 following 13 posts

An engineer on a mission to provide open and secure access to the Internet for everyone. [bridged from fosstodon.org/@iinuwa on the fediverse by fed.brid.gy ]

PostsRepliesMedia
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 13/10/2026
@MegaMichelle no, not yet. When using browser extensions, there is a race for whichever extension loads first, so it's not a great user experience. As password managers move to native passkey integrations, this becomes much better. 1Password has it available, and Bitwarden will have it soon.
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 19/09/2026
We need to do what we did with TLS certificates with online product reviews. I don't want to see "verified buyer" anymore: show me "unverified buyer" instead.
001 1
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 28/08/2026
We also have experimental support for CTAP2 hybrid using BLE only: no cloud tunnel required! We still have to sort out what seems to be some Bluetooth stack quirks to make it reliable, but it's an exciting new feature that can enable non-Android or iOS mobile devices to use hybrid without […]
fosstodon.org
Original post on fosstodon.org
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 28/08/2026
If you're curious about progress for the Linux #passkeys API, here's a few updates: We just released credentialsd 0.3.0 which includes XDG Desktop Portal integration, a redesigned credential selection screen, the ability to set security key PINs, and related origins support! Thanks to all the […]
fosstodon.org
Original post on fosstodon.org
101 1
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 30/07/2026
Had some fun working on some paper wireframes. I'm not a designer, but I had fun playing with some options without having to click and drag on stuff and get distracted with CSS and GTK.
Drawing of a sign-in page on a web browserDrawing of a window overlaid on the browser with passkey credentials to select fromDrawing of a passkey hybrid QR code window on top of the browser window
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 04/04/2026
One thing I don't understand about Merkle tree certs is why a relying party should trust the inclusion proof from an authenticating party. I know we can trust the root hash and can verify the cert hash, but the intermediate hashes are also given by the client. Theoretically, they could give any […]
fosstodon.org
Original post on fosstodon.org
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 03/04/2026
I want something that integrates with my podcast player and my RSS feed subscriptions and bookmarks that does TTS to speak the unread and unplayed articles. (If I only listen to an article it shouldn't be marked as read, and articles I've read shouldn't be on the podcast playlist.) I recently […]
fosstodon.org
Original post on fosstodon.org
110 1
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 24/02/2026
I work a lot on passkeys, which is a Bring Your Own Key method of signing into websites, supporting decentralization using the browser to mediate access to a credential to provide strong authentication. The FedCM API with the IdP registration proposal works with the problem from a different […]
fosstodon.org
Original post on fosstodon.org
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 02/02/2026
One of my open source colleagues presented on our current progress with passkeys on Linux! www.fosdem.org/2026/schedule/event/… Thanks for presenting, Alfie! I'm glad to be working with you. :)
fosdem.org
FOSDEM 2026 - Credentials for Linux: Bringing Passkeys to the Linux desktop
003 3
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 15/11/2025
A high level draft of an API for integrating third-party credential providers with credentialsd is up open for comment: github.com/linux-credentials/creden…
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 06/11/2025
All I want for Christmas this year is an entitlement system for Linux.
020 2
Reposted by iinuwa
Royce Williams @tychotithonus.infosec.exchange.ap.brid.gy · 16/08/2025
> In an email FIDO Alliance CEO Andrew Shikiar cast doubt on the seriousness of the vulnerability. **“The attack described here does not reflect a vulnerability in passkeys or FIDO protocols,”** he said. “Rather, it illustrates the importance of service […] [Original post on infosec.exchange]
FIDO ALLIANCE CEO ANDREW SHIKIAR
EVERY TIME SOME ARTICLE TITLE CALLS
AN IMPLEMENTATION WEAKNESS A "FIDO BYPASS"
112 2
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 07/07/2025
@nopatience Make sure to check out www.passkeycentral.org! They have some good UX and organizational guidelines that help you prepare
000 0
iinuwa @iinuwa.fosstodon.org.ap.brid.gy · 06/07/2025
@nopatience no, you're right. The backend stuff is pretty simple and can be implemented in a couple hundred lines of code. But the UX is harder, though things have mostly settled with the major OSes, so that's better than when it began! Account recovery becomes more important with passkeys, but […]
fosstodon.org
Original post on fosstodon.org
100 1