News for hackers. Stuff that matters.
Re:Apple, Google and Microsoft Commit to Expanded Support fo... by lxgr on Thursday May 05, 2022 @02:51PM (#31277104)
How would that work in practice? Key/certificate revocation is notoriously hard.
Re:Apple, Google and Microsoft Commit to Expanded Support fo... by sdfgdfgbsdfg on Thursday May 05, 2022 @08:28PM (#31279788)
Here's how YubiCo proposes to address this: https://www.yubico.com/blog/yubico-proposes-webauthn-protoco... Revocation is done RP side, but it essentially allows a primary authenticator to register itself and the secondary on a given RP
Re:Apple, Google and Microsoft Commit to Expanded Support fo... by withinboredom on Thursday May 05, 2022 @03:09PM (#31277292)
With GitHub, you just remove it from your account. For 2fa, same story.