<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[I think it would be really fun to do a talk that&#x27;s not just &quot;intro to passkeys&quot; but more &quot;how can you mess up passkey implementation&quot;.]]></title><description><![CDATA[<p>I think it would be really fun to do a talk that's not just "intro to passkeys" but more "how can you mess up passkey implementation". </p><p>I know you can set up SSO so you don't link the SSO accounts immutably to an account. You 100% could do the same thing with passkeys, and I think proposing a talk would be good incentive to learn more about how passkeys work in detail (like how badly could you mess up a passkey request? Or is it really just that robust because the browser controls it? What if you roll your own in a custom app? Maybe the only issues are after the passkey exchange, but that still gives you a rich tapestry of fuck ups to choose from!)</p><p>Would you be interested in such a talk? What questions do you have about passkeys?</p>]]></description><link>https://board.circlewithadot.net/topic/0fb0f99e-ee0e-436d-bda1-5ec84ea589ca/i-think-it-would-be-really-fun-to-do-a-talk-that-s-not-just-intro-to-passkeys-but-more-how-can-you-mess-up-passkey-implementation-.</link><generator>RSS for Node</generator><lastBuildDate>Fri, 17 Apr 2026 09:23:03 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/0fb0f99e-ee0e-436d-bda1-5ec84ea589ca.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 09 Apr 2026 10:12:28 GMT</pubDate><ttl>60</ttl></channel></rss>