4 ms·
What do you mean by a MITM phishing attack? U2F credentials are tied to a particular domain, and so do not rely on the user making sure they are on the correct
by rejberg 8y ago
What do you mean by a MITM phishing attack?
U2F credentials are tied to a particular domain, and so do not rely on the user making sure they are on the correct website. As such, they are not susceptible to typical credential phishing attacks.
- snarf21 8y agoThings like this: https://security.stackexchange.com/questions/157756/mitm-attacks-on-fido-uaf-and-u2f https://security.stackexchange.com/questions/157756/mitm-att... This is assuming an owned machine. Not the easiest attack but still possible. Obviously things like Google Authenticator (while good) are even more susceptible to MITM phishing.
- scrollaway 8y agoIf the machine is owned it's trivial to dig the cookie jar once you're logged in.