Re:Google: Security Keys Neutralized Employee Phishing
by tptacek on Monday July 23, 2018 @12:40PM
(#17593888)
This would make sense if virtually every website in the world didn't react to the short-term TOTP secret by handing back a long-term HTTP secret.
[ Parent
| on HN ]
Re:Google: Security Keys Neutralized Employee Phishing
by lmm on Monday July 23, 2018 @04:35PM
(#17595747)
If there's no point improving client authentication until you've improved website security and no point improving website security until you've improved client authentication then neither will ever get better.