| ▲ | mixdup 2 hours ago | ||||||||||||||||
Google would not do something that would lock out half of the mobile device market. iOS doesn't do attestation. Also, is there a reason Thunderbird or other clients couldn't use OAuth? I'm fairly certain I can login to GMail on Mail.app in macOS and other clients, so they're not using that to lock people into the official app or their browser | |||||||||||||||||
| ▲ | goda90 2 hours ago | parent | next [-] | ||||||||||||||||
Are you sure iOS doesn't do attestation? Google recently turned on requiring an iOS or Google-attested Android device with a camera for some reCAPTCHA challenges(i.e. take a photo of this QR code). They waited for Apple to support it before doing so. | |||||||||||||||||
| |||||||||||||||||
| ▲ | BizarroLand 2 hours ago | parent | prev | next [-] | ||||||||||||||||
Google today might not do that, but Google tomorrow, when some upper manager's multi-million dollar bonus gets tied by a performance metric on how many people are using passkeys for gmail would in a heartbeat. | |||||||||||||||||
| ▲ | ForHackernews 2 hours ago | parent | prev [-] | ||||||||||||||||
Thunderbird is an email client, not a web browser or a web server. It had to build in support for both of those things to support oauth2 login: https://bugzilla.mozilla.org/show_bug.cgi?id=849540 I assume Mail.app had to do the same. | |||||||||||||||||
| |||||||||||||||||