“I’m knittin’ like a fuckin electric nan”

  • 1 Post
  • 24 Comments
Joined 5 years ago
cake
Cake day: January 15th, 2022

help-circle


  • I’ve been using Signal since before it was called Signal. I’m a big fan, and I still use it and recommend it. No, it isn’t perfect, but for my needs, it’s still the best all-around. I am always interested in alternatives, but they mostly haven’t stacked up. Top contender for me right now is DeltaChat. I’m also playing around with Sideband/reticulum, which is a super interesting project, but nowhere near ready for primetime.

    Edit: forgot to mention Veilid chat :)











  • Honestly, I don’t understand them well enough to recommend them either. I do IT, and I set my users up with a (managed) password manager and MS Authenticator. If I encounter a situation where a user has ended up with a passkey for a given service, I just leave it be. On the other hand, if someone is locked out because of a passkey, I reset it and get them set back up with the Authenticator app.


  • After reading both of the posts, I’m kind of back where I started with passkeys: neutral. I’m pretty happy with my current setup of a self-hosted password manager, diceware master passphrase and strong, unique passwords for every account, along with an open source app for TOTP. I only ever see passkeys pushed on me for work-related accounts anyway, but I’m not using them there either. I do have a question though if someone can answer: are passkey protected logins also vulnerable to stolen session cookies?