Opaque, Interoperable Passkey Records (and a Go API)

Passkeys are presented as the most effective solution to phishing attacks, but server-side implementation remains complex due to lack of standardized database schemas across different implementations. A new specification proposal (c2sp.org/passkey-record) aims to simplify this by defining an interoperable, opaque passkey record format inspired by password hashing standards, allowing developers to treat passkeys similarly to password hashes while enabling library and backend switching without losing credential data.