News for hackers. Stuff that matters.

A comment on Google: Security Keys Neutralized Employee Phishing. Parent comment

Re:Google: Security Keys Neutralized Employee Phishing by SmellyGeekBoy on Monday July 23, 2018 @10:13AM (#17592891)
The current domain is sent to the device and used to generate a private key that is used to authenticate. If it's a phishing domain, the device will return a private key that won't work on the real domain.
[ Parent | on HN ]

There are no comments on this comment yet.