Penta

@ Penta @lemmy.world

Posts

0
Comments

59
Joined

3 yr. ago

You can use curl itself, just set a SOCKS5 proxy with --socks5. Simply point it to the address of a running tor instance. So on arch linux for example, install the tor package, start the systemd service and use localhost:9050 as the proxy.

6mo ago

VoidAuth Release v1.1.0 - Passkey-only Users 🔑

Jump

Penta @lemmy.world 6mo ago

Absolutely. But passkeys themselves are an open standard, so the implementation is different depending on device, browser etc. I dont use Windows, I dont know how it works there. I dont even use passkeys a lot in general, mostly due to it not being used on that many sites. I still think the technology pretty interesting and will be more relevant in a few years.

6mo ago

VoidAuth Release v1.1.0 - Passkey-only Users 🔑

Jump

Penta @lemmy.world 6mo ago

A lot of the bigger players like Microsoft, Google and Apple support it. For small sites its a lot rarer. The keys are stored on device, but can be synced in a variety of ways, often using the cloud. There is problems with vendor lock in vecause of that, even though passkeys are an open standard by themselves. Generally nothing is stopping you from copying/synching them yourself.

6mo ago

VoidAuth Release v1.1.0 - Passkey-only Users 🔑

Jump

Penta @lemmy.world 6mo ago

I replaces passwords with a cryptographic key. When you register at a website, you do not put in a password, instead it generates a key-pair, kinda like you would have with ssh auth. Usually to login you use biometrics, which will unlock the keys on your device. Advantage is that they are phishing resistant (the keys are bound to a specific domain), convenient and if the database of the website is leaked, it doesnt matter since they can only store your public key, which is worthless for authentication.