>Too bad if something like twitter happens your yubikey is probably useless after it would've prolly logged anything to their servers. Like krupan also points

>Too bad if something like twitter happens your yubikey is probably useless after it would've prolly logged anything to their servers. Like krupan also points out, this is flat out incorrect. The FIDO2 protocols are designed so that such a failure case is not possible, for two reasons. First, no secrets are shared - the server only sees _public_ keys and signatures. Second, a different public key is generated for each website - there is no globally correlatable identity.