New post on choosing the right `timeout` value in #WebAuthn!

tl;dr
* design your challenge-response protocol to allow for a very long value
* whatever you do, don't leave it to the default value

#passkeys #passkey

https://satragno.com/blog/webauthn-timeout/