Re:OpenSSH's Support for U2F/Fido Security
by sowbug on Tuesday November 05, 2019 @04:17PM
(#21456790)
They do have a device counter, incremented on every usage, to help detect cloning. It's up to the server whether to enforce the constraint that the counter increase on every usage. Unfortunately this means that the token does need a little bit of memory.
I don't know whether FIDO2 has the same design.