Comment on Why isn't using a key file the most common way to log into self-hosted servers?

• HelloRoot@lemy.lol ⁨1⁩ ⁨month⁩ ago

  It does sound like one, but it isn’t.

  Passkey

  • Per-service key pair, unique per domain, Identity bound only to that specific account on that site
  • Challengeresponse via WebAuthn
  • Trust anchored only in the target service (no external CA)
  • Private key sealed in OS / secure hardware keystore

  Certificate login

  • Single global identity usable across many services
  • TLS client authentication with certificates
  • Trust established via certificate authorities and chain validation
  • Private key stored in exportable file or smartcard

  source

  • GreenCrunch@piefed.blahaj.zone ⁨1⁩ ⁨month⁩ ago

    Thanks for the explanation!

    source
• Appoxo@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

  Nope it’s a P12 certificate

  source