4 ms·
As far as I understood the U2F standard, the dongles need a FIDO-issued manufacturer key. Do sites accepting U2F just not check that the corresponding signature
by tinloaf 10y ago
As far as I understood the U2F standard, the dongles need a FIDO-issued manufacturer key. Do sites accepting U2F just not check that the corresponding signature is present?
- tinloaf 10y agoAddendum: See page 14 of the specs overview: https://fidoalliance.org/specs/fido-u2f-overview-v1.0-rd-20140209.pdf https://fidoalliance.org/specs/fido-u2f-overview-v1.0-rd-201...