@jded@shark.c00lest-kats-on.ovh
@sodiboo@gaysex.cloud Yea in all cases they probably can't be reimplemented by the mods' apks due to some measures protecting against MITMs and/or fake apps, at best you'd need a passkey tied to that specific client mod's apk signed by that specific signing key afaik
@sodiboo@gaysex.cloud
@jded@shark.c00lest-kats-on.ovh
a passkey [...] signed by that specific [client mod's] signing key afaikbut... passkeys are created by the server.
the passkey was not created by the discord app.
there is no "signing it with the app's keys" that's not how passkeys work. this credential was straight up not created in any Android environment.