Replacing CAPTCHAs with WebAuthn passkeys for bot prevention

Viewed 71
The discussion revolves around a proposal to replace traditional CAPTCHAs with WebAuthn passkeys for preventing bot activity on websites. However, users express confusion over the user experience and effectiveness of this approach. Concerns are raised regarding the current capabilities of bots, suggesting they may not be advanced enough to bypass WebAuthn yet. Several commenters note that while the idea isn't novel, it may not be the best long-term solution as there is a risk of bots adapting over time. They emphasize the need for more robust security measures that are fundamentally difficult for bots to mimic. Some users advocate for better identity verification methods, even suggesting government-backed digital IDs to eliminate bot accounts entirely, despite acknowledging privacy concerns. Overall, existing solutions seem insufficient against pervasive bot behavior.
0 Answers