News for hackers. Stuff that matters.

A comment on FIDO Alliance publishes new spec to let users move Passkeys across providers. Parent comment

Re:FIDO Alliance publishes new spec to let users move Passke... by sitharus on Wednesday October 16, 2024 @09:45PM (#41865662)
Phishing relies on visual confusion to get people to enter their passwords on a site that isn't the one they think it is.

WebAuthn credentials are bound to the issuing domain, so the user agent will not supply a passkey to a domain other than the one it should go to.

[ Parent | on HN ]

There are no comments on this comment yet.