Authentication does not equal authorization: Are we asking passkeys to prove too much?
Securing the login is only half the battle. Where passkeys end and real trust begins.
Sources
- T2Authentication does not equal authorization: Are we asking passkeys to prove too much?TechRadar / Tom's Guide / PCWorld / Pocket-lint / Stuff