Hacker News new | past | comments | ask | show | jobs | submit login

Maybe, maybe not. You went out of your way to attack a straw man instead of showing any of that. So why should I believe you now?





I have no idea who you are, am comfortable with who does and does not believe me here, and think you should do you. But no: the two approaches do not offer comparable practical security.

From the questions and comments across the rest of this thread, the misunderstanding here seems clear: the person I'm responding to did not realize that FIDO2 cryptographically binds credentials to sites.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: