7 ms·
You've said this a couple times, but... it's not true? Webauthn allows for software authenticators and there is nothing to stop you from transferring it comple
by LamaOfRuin 1y ago
You've said this a couple times, but... it's not true?
Webauthn allows for software authenticators and there is nothing to stop you from transferring it complete with keys to someone else.
- jwally 1y agoFair point...but worth the effort? Also, what if the bank signs your ip-address and user-agent-header as part of their payload back to the RP? That's like mission-impossible / hack into Langely level of effort to get into pornhub, no?