News for hackers. Stuff that matters.
Re:Show HN: A secure, open source U2F token you can make wit... by tinloaf on Wednesday June 22, 2016 @02:27PM (#11955944)
As far as I understood the U2F standard, the dongles need a FIDO-issued manufacturer key. Do sites accepting U2F just not check that the corresponding signature is present?
Re:Show HN: A secure, open source U2F token you can make wit... by tinloaf on Wednesday June 22, 2016 @02:29PM (#11955954)
Addendum: See page 14 of the specs overview: https://fidoalliance.org/specs/fido-u2f-overview-v1.0-rd-201...