It’s very interesting reading this and related threads on Web Authentication (“passkeys”).
The ability for people to use their created/associated key material to sign and encrypt their communication would be a huge boon for decentralised web applications. And yet, of course, the related W3C groups reject the use case. Because allowing people (instead of the corporations the W3C represents) to control their own identities is anathema to Big Tech.
Your daily reminder that the W3C is the standards body of people farming.
@aral To change that, we need to change how profits are generated in the internet.
⇒ ads must end.
@aral I have the same gripe with New Zealand's "RealMe" https://www.realme.govt.nz/ - "The easiest and most secure way to prove your identity online" . Having jumped through the ID hoops it can even be used to renew a passport, yet they don't provide digital certificates/keys to allow people to sign/encrypt things. I asked, and also got the answer that those things are "out of scope" - a missed opportunity!