Encryption (PRF) via Windows Hello passkey?

[Nail1684]

@passkeydemo

Yes. I also tried logging in from a new private window to make sure no session data was cached:

Hm. I really would like to contact “confer” about this as well. BTW, they have no email, no imprint… I don’t see any way to contact them?!

@passkeydemo

@Nail1684

I just tested it again, and I get this error prompt when I try to “unlock” confer:

Maybe there is something wrong with your current passkey. Did you test to create a new passkey on confer.to?

That was a newly created passkey…

@passkeydemo

At least so far, I haven’t found any website that actually supports PRF where my test fails. The only exception is Bitwarden, but in that case I don’t even get far enough in the flow to test it.

Did you try posteo? (I don’t have an account there…)

@passkeydemo

At least, their testing site works for me: https://webauthn-passkeys-prf-demo.explore.corbado.com/
I’ll contact Corbado directly to see if they can confirm or explain this.

@passkeydemo

Thank you for confirming this! Please let me know if I should create a bug report. Otherwise, I’d appreciate it if you could share the link in case you’ve already created one.

Didn’t get to this yet… But go ahead, if you want to!