4 ms·
Not really. The phisher can just ask for the second factor the same way they ask for the password.
by wopwopwop 10y ago
Not really. The phisher can just ask for the second factor the same way they ask for the password.
- angrygoat 10y agoU2F knocks this on the head - a MITM site won't have the secret required to generate the token.
- wopwopwop 10y agoWrong. The target domain asks the MITM for the secret, the MITM asks the victim for the secret, the victim gives the secret to the MITM and the MITM gives the secret to the target domain. Just like with the password. You have no idea what you're talking about and yet you downvote first and ask questions later.