Opaque, Interoperable Passkey Records (and a Go API)
Summary
Passkeys are discussed as a phishing-resistant authentication method. The piece describes an interoperable, opaque passkey record format and a stateless Go API to manage registration and login flows, aiming to simplify server-side integration while preserving security properties. It also covers trade-offs around credential ID collisions and the need for well-specified storage.