Was thinking that maybe, despite all the reasons that Passkey sucks, I should implement Passkey for my blog engine. So of course the official line is that Web Authentication is rapidly evolving and incredibly complex, you should use libraries instead (which... it shouldn't need to be) and... there are no libraries in Perl. And if I believed that this was a good spec, rather than a bad one with lots of money behind it, I might dig deeper, but. Ugh.