Authentication does not equal authorization: Are we asking passkeys to prove too much?
Securing the login is only half the battle. Where passkeys end and real trust begins.
Other versions of this page are available with specific content for the following regions: