The information being released and then news coming out about it is suspicious? Or is there some bias you're being cagey about?
2,829 karma · joined August 19, 2009
How do you know the hashed value stored in the database is the same hashed value the user submitted? Server side I can add a salt and hash more before storing or comparing.
The password never has to be transferred. In fact never having the password should be the goal. Not even a first time. Don't let the password leave their device. You transmit the hash.
>Meanwhile passkeys are completely invulnerable.
Not according to the parent comment and the article.
Into a hash algorithm not to a remote server.
>Nothing else available to the average user does.
Literally every person could use a unique password for each login.