News for hackers. Stuff that matters.

A comment on Web Authentication: Proposed API for accessing Public Key Credentials. Parent comment

Re:Web Authentication: Proposed API for accessing Public Key... by rhizome on Tuesday April 10, 2018 @11:38AM (#16802135)
a fingerprint scanner (something you are), and holds the keypair (something you have)

What segregation between these is there within the phone? Doesn't it mean the fingerprint gets you the keypair for free?

[ Parent | on HN ]
Re:Web Authentication: Proposed API for accessing Public Key... by mattnewton on Tuesday April 10, 2018 @11:44AM (#16802206)
If you also have the physical phone in your hands, yes.
[ Parent | on HN ]
Re:Web Authentication: Proposed API for accessing Public Key... by xori on Tuesday April 10, 2018 @11:48AM (#16802249)
You now have a severed finger. Where's the phone? You'll still need both items.
[ Parent | on HN ]