Re: [webauthn] Recovering from Device Loss

@suedadam By specification, each FIDO U2F devices contains an attestation key which proves its vendor. I believe that this correlates to vendors' promise that device private key can't be stolen. In addition devices contain a counter which would not be synchronized when copying keys initially.

-- 
GitHub Notification of comment by jans23
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/931#issuecomment-408764040 using your GitHub account

Received on Monday, 30 July 2018 06:50:23 UTC