5 ms·
I guess for physical keys, it means you losing it instantly triggers anyone with it access to your M$ account, so eg. TSA could take it from checked luggage, pl
by judge2020 5y ago
I guess for physical keys, it means you losing it instantly triggers anyone with it access to your M$ account, so eg. TSA could take it from checked luggage, plug it in, and go snooping through your email. Webauthn on Windows via regular TPM is good in that it's not really tied to the computer's cryptographic key, it requires some wrapped data stored by Windows as well (when I reinstalled Windows 11->Windows 11 from scratch none of my Webauthn logins worked, it was like I had a new key entirely).
- postalrat 5y agoThe physical keys I have require a PIN to be entered before they function. I haven't looked into the specifics but it's possible the token denies attempts after a certain number and possibly deletes itself after a certain number of attempts fail in a row.