News for hackers. Stuff that matters.

A comment on W3C approves WebAuthn as the web standard for password-free logins. Parent comment

Re:W3C approves WebAuthn as the web standard for password-fr... by ak217 on Monday March 04, 2019 @09:26PM (#19307613)
U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading.
[ Parent | on HN ]
Re:W3C approves WebAuthn as the web standard for password-fr... by dontbenebby on Monday March 04, 2019 @10:11PM (#19307796)
>U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading.

Yes, IIRC it's impossible (or nearly so) to phish U2F.

[ Parent | on HN ]