it's certainly complex! https://webauthn.guide/ https://webauthn.guide/ challenge, attestation, rp, alg -7!? usb, ble, nfc!? it seems very easy to "hold it wro

it's certainly complex! https://webauthn.guide/ https://webauthn.guide/ challenge, attestation, rp, alg -7!? usb, ble, nfc!? it seems very easy to "hold it wrong" :) and if you add u2f-fido to the mix, which is how most people so far saw webauthn in practice, it's even more complex. it took me a lot of time to figure out what actually happens when I tap the security key. do I have one keypair? no, actually I have a lot, one for each site, but the site stores it in a clever encrypted encoded scheme.