3 ms·
This is good but how to make it work for phone, email and txt messages ?
by tonymet 3y ago
This is good but how to make it work for phone, email and txt messages ?
- droopyEyelids 3y agoThe way I see it, it works for all the above. Passkeys are available on all devices, and whatever contact method the attackers use will harvest a signed response with an invalid RPID (a credential that won't work). Is that the point you were making?
- tonymet 3y agoYeah I’m thinking of how to integrate authn into messaging and phone apps. One idea is to add the phone to the web certificate so a remote check can be made during the call