11 ms·

FIDO/WebAuthn has been designed to be first factor authentication (passwordless) as well as 2FA. Though, I agree lost and stolen devices are a problem whose so

FIDO/WebAuthn has been designed to be first factor authentication (passwordless) as well as 2FA. Though, I agree lost and stolen devices are a problem whose solution space needs more exploring than simply multiple auth devices.

bfulgham 6y ago
This is, of course, an active thread of discussion in the WebAuthentication working group.
- GoMonad 6y ago
  Can you point me to that discussion? I'd love to read more about it.