>No cryptography can protect against this scenario I remember reading about how MITM is prevented in U2F [1] by using information about the connection as part

>No cryptography can protect against this scenario I remember reading about how MITM is prevented in U2F [1] by using information about the connection as part of the challenge that the authenticator has to sign. Could something similar be possible in this scenario? [1] https://fidoalliance.org/specs/u2f-specs-master/fido-u2f-overview.html https://fidoalliance.org/specs/u2f-specs-master/fido-u2f-ove...