The video says that we should call signOn() as soon as possible even before the user focuses the username text field (e.g. in viewDidLoad). This method is supposed to obtain a challenge from the server and create authorization provider, request & controller and eventually call: controller.performAutoFillAssistedRequests(). But that means that the challenge from the server is needed before the username is known so... How can the server know which public key should it use to construct the challenge?

I'm interested in the "Transition users away from passwords" point that was mentioned but not covered in depth. Once set up with a passkey, should we be disabling password-based logins for that user? Essentially securing accounts one by one as they move over. (with the long term goal of preventing registration with passwords altogether) And what does the user flow look like for recovering an account when the private key is lost (stolen device), are we just back to sending an email or SMS with a url to connect a new device (seems like a weak link). or when the users device is "left at home" (I'm assuming no-device = no luck, a compromise of extra security vs weak passwords you carry around in your head).

In the tech preview of Safari setting the authenticatorAttachment to "platform" still enables the feature. However using the similar setting in Chrome previews - the feature is only enabled as "cross-platform". Will this be eventually aligned? If so which is the correct one?

Is this functionality based on registration with the requireResidentKey flag? Or will it also work with non-discoverable credentials? Also - does is use the user.displayName like the OS popups do? Thanks!

Short question: Is is possible to disable the iCloud Keychain synchronization of the Passkeys on-demand? This would ensure and allow device-specific binding where necessary.

Will the Apple passkey work with File Vault similar to how Windows PIN does with Bitlocker and TPM chips?

I took notes during the "Meet Passkeys" session. If interested, please see the attached "Notes from session": Notes from session For the session video, please see the following link: https://developer.apple.com/wwdc22/10092