4 ms·
Didn't this page used to say whether or not a site supported U2F specifically or was that some other very similar looking page? Its unfortunate that they don't
by psanford 7y ago
Didn't this page used to say whether or not a site supported U2F specifically or was that some other very similar looking page?
Its unfortunate that they don't have this information. I would switch services to a site that specifically supports U2F/FIDO/FIDO2 but not to a site that uses a random proprietary hardware token that is still vulnerable to phishing.
- cmg 7y agoWouldn't that fall under the "Hardware Token" column, or is that a different technology?
- psanford 7y agoI'm trying to say that all hardware tokens are not created equally. A hardware RSA TOTP-esque fob offers no phishing protection where as a FIDO key does. Its unfortunate this site doesn't distinguish between those two cases.
- cmg 7y agoAh, thanks for the clarification. I didn't read/parse your original comment properly.