Yubico警告说,虽然密钥可以改善安全,但有装置限制的选项比云层储存的选项更为安全。
Yubico warns that while passkeys improve security, device-bound options are safer than cloud-stored ones.
Yubico是安全钥匙的领头人,他警告说,虽然密钥正在以更好的安全和方便使用取代密码,但并非所有的密钥都是平等的。
Yubico, a leader in security keys, warns that while passkeys are replacing passwords with better security and ease of use, not all passkeys are equal.
储存在云中的同步密钥比带装置的密钥更方便,但比带装置的密钥更安全,后者更具有保护性,但不够灵活。
Synced passkeys, stored in the cloud, are convenient but less secure than device-bound passkeys, which are more protective but less flexible.
该公司建议各组织要求身份提供商提供可配置性,强制执行带装置的密钥,并消除不安全的后退,以确保稳健的安全。
The company advises organizations to demand configurability from identity providers, enforce device-bound passkeys, and remove insecure fallbacks to ensure robust security.