FIDO Security Reference

• From: Jeff Hodges <jdhodges@google.com>
• Date: Tue, 13 Oct 2020 10:47:25 -0700
• To: public-webauthn-pay@w3.org
• Message-ID: <CAOt3QXv6uS-w-21EBeQRtAZp45Qjy=e6gYsZXJLb8tg6vMP9ig@mail.gmail.com>

https://fidoalliance.org/specs/fido-u2f-v1.2-ps-20170411/fido-security-ref-v1.2-ps-20170411.html

Although this doc (a threat model analysis) analyses UAF & U2F, it is
largely also applicable to WebAuthn+CTAP (aka FIDO2, WebAuthn/FIDO2, etc).

HTH,

=JeffH

Received on Tuesday, 13 October 2020 17:48:15 UTC