Re: [web-nfc] YubiKey NDEF analysis (#543)

In traditional OTP solutions like RSA SecurID dongles, it is possible for users to have apps open the camera and scan the codes, but it requires the user to bring the camera within the field of view of the dongle - same as with NFC, you would need to place your unlocked phone within reach (5-10 cm, most likely 5cm) of the YubiKey in order to be able to read it.

You might think that that could happen with both in the pocket at the same time, but Web NFC adds further requirements:

* Unlocked phone
* Focused web app with NFC permission

Additionally, it could be possible to use the proximity sensor to disable NFC reads when something is close, like when in the pocked or when laying on the table face down with keys on top.

-- 
GitHub Notification of comment by kenchris
Please view or discuss this issue at https://github.com/w3c/web-nfc/issues/543#issuecomment-584641801 using your GitHub account

Received on Tuesday, 11 February 2020 13:47:22 UTC