News for hackers. Stuff that matters.

A comment on FIDO2 security key company publishes results of internal security audit. Parent comment

Re:FIDO2 security key company publishes results of internal ... by brazzy on Friday February 21, 2020 @12:50AM (#22381199)
The standard is actually designed specifically to prevent that.
[ Parent | on HN ]
Re:FIDO2 security key company publishes results of internal ... by ac29 on Friday February 21, 2020 @01:11PM (#22385287)
So what happens when you lose your key, or it stops working?
[ Parent | on HN ]
Re:FIDO2 security key company publishes results of internal ... by brazzy on Friday February 21, 2020 @01:51PM (#22385651)
You need to have a completely separate fallback. Typically the service will at minimum give you some one-time codes as an alternative for such cases. many services allow you to register multiple keys or TOTP apps.
[ Parent | on HN ]