@payton

Yeah, this would be more contradictory to the Passkey ethos I think. Passkeys are ultimately meant to be resistant to phishing, so opening up a Passkey to all domains would remove a lot of the benefits. If you remove the domain constraint, I think you would need to replace it with something else that's consistent across browser security models.

0 reply

0 recast

0 reaction