Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

No warning when server uses not matching rpid for Passkey usage

  • 1 freagra
  • 0 leis an bhfadhb seo
  • 46 views
  • Freagra is déanaí ó markwarner22
  • Cartlannaithe

Simon Gräff
Simon Gräff

When i try to login via Passkey on a server that sends a rpid in the challenge-json that does not match the domain there is only a warning in the console. Why is there no warning where any user can see it e.g. as a Pop-Up? I feel like this might be a way to get users to downgrade from passkey to password in a phishing-attempt.

Thanks for your Answers.

When i try to login via Passkey on a server that sends a rpid in the challenge-json that does not match the domain there is only a warning in the console. Why is there no warning where any user can see it e.g. as a Pop-Up? I feel like this might be a way to get users to downgrade from passkey to password in a phishing-attempt. Thanks for your Answers.
Attached screenshots

All Replies (1)

markwarner22
markwarner22

You need to check with their site support to ask what us going with the login.