• 0 Posts
  • 32 Comments
Joined 7 months ago
cake
Cake day: April 1st, 2026

help-circle


  • every single argument I’ve seen against passkeys could be said against TOTP and 2FA in general.

    • SMS token: they need to know your phone number. it’s a privacy issue. also actual lock in to one device.
    • MS authenticator with push notifications: actual lock in to a single app
    • TOTP: you need a manager to store it, way more phishable than passkeys

    and yes, you could use third part TOTP managers, but as you said, the average user wont. I dont feel any argument against passkeys is particularly strong.


















  • because you are clearly minimizing the impact of AI crawlers. sites don’t go from 1000 page requests /day to 10,000. I’ve seen sites going from 50~100 request per minute to 10.000 request per minute and they are mostly bots. no matter how efficient your site is, if the server cannot manage the connections it does not matter whether the content is cached or not.

    And caching does not solve everything because many cloud providers charge for it, so even if you could potentially deliver them, it suddenly becomes too expensive to do so.