Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat...
by tialaramex on Monday September 24, 2018 @12:10PM
(#18058881)
You seem confused. I think you're describing TOTP, but this whole thread is about FIDO.
WebAuthn, U2F and similar FIDO based schemes are sending some public key signed blobs over the network. A PIN is purely a local protection, it's not sent over the wire. So a hacker can't just try guessing the PIN. First they need to steal your physical token, only then could they start guessing PINs for the stolen token.
WebAuthn, U2F and similar FIDO based schemes are sending some public key signed blobs over the network. A PIN is purely a local protection, it's not sent over the wire. So a hacker can't just try guessing the PIN. First they need to steal your physical token, only then could they start guessing PINs for the stolen token.