4 ms·
The big advantage of Fido U2F is that the token authenticates the web site before generating the response necessary to authenticate the user. This means it’s i
by ttul 9y ago
The big advantage of Fido U2F is that the token authenticates the web site before generating the response necessary to authenticate the user.
This means it’s impossible for an imposter web site to man in the middle the U2F token.
- gruez 9y ago>This means it’s impossible for an imposter web site to man in the middle the U2F token. https://news.ycombinator.com/item?id=16501400 https://news.ycombinator.com/item?id=16501400
- ttul 9y agoWell, that's a cheap shot. It's a very sophisticated attack and assumes the user is dumb enough to click a dialog allowing direct access to their USB device. Many users are indeed that dumb. So my second come back is to say that the Chrome team is working on a fix for this and that only certain U2F keys are vulnerable.