3 ms·
U2F knocks this on the head - a MITM site won't have the secret required to generate the token.
by angrygoat 10y ago
U2F knocks this on the head - a MITM site won't have the secret required to generate the token.
- wopwopwop 10y agoWrong. The target domain asks the MITM for the secret, the MITM asks the victim for the secret, the victim gives the secret to the MITM and the MITM gives the secret to the target domain. Just like with the password. You have no idea what you're talking about and yet you downvote first and ask questions later.