Passkeys are the new authentication technology that aims to replace passwords. It provides significant security benefits and is now widely supported on online services. However, since passkey credentials can now be stored in a credential manager, there is the risk of these credentials being stolen. As shown in previous incidents of well-known password managers (e.g. LastPass), credentials might get stolen on a large scale. Users should therefore have the possibility to revoke passkeys effectively when there is a reason to believe they have been compromised.
The goal of this Master's thesis is to develop a passkey revocation service that is compatible with the passkey ecosystem. You should therefore be motivated to learn more about passkeys and also have an interest (and ideally some experience) in implementing web applications.
Does this topic sound compelling to you? Feel free to contact the supervisor.