News for hackers. Stuff that matters.

A comment on LastPass users warned their master passwords are compromised. Parent comment

Re:LastPass users warned their master passwords are compromised by gruez on Wednesday December 29, 2021 @11:04AM (#29726013)
>you need to know the corresponding private key, live.

This seems like the main blocker. Why is that required? In theory all the site needs is a public key to verify against.

[ Parent | on HN ]
Re:LastPass users warned their master passwords are compromised by tialaramex on Wednesday December 29, 2021 @01:42PM (#29728192)
If you have questions about why the WebAuthn protocol works the way it does, it seems like you'd want to first read the protocol in detail and then if you still have questions ask its maintainers.
[ Parent | on HN ]