2 ms·
If you share the same FIDO U2F key between services, does that mean that one service could spoof tokens for a different service? e.g. foo gets compromised, so
by philip1209 12y ago
If you share the same FIDO U2F key between services, does that mean that one service could spoof tokens for a different service?
e.g. foo gets compromised, so attackers can generate codes for google apps.
- ef4 12y agoNo. There are no shared secrets. This is real asymmetric crypto.