Interesting. If the counter can be zero, does that mean passkeys can be non-resi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

diggernet on June 25, 2025 | parent | context | favorite | on: Breaking WebAuthn, FIDO2, and Forging Passkeys

Interesting. If the counter can be zero, does that mean passkeys can be non-resident keys? And which party gets to decide the counter value?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact