Atleast for my u2f token, I'm being shown the site I'm signing for on a hardware... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tscs37 on July 25, 2017 | parent | context | favorite | on: Soft U2F: A software-based U2F authenticator for m...

Atleast for my u2f token, I'm being shown the site I'm signing for on a hardware screen.

mastahyeti on July 25, 2017 [–]

Which device are you using? With U2F, the browser doesn't send the name of the site to the authenticator.

tscs37 on July 25, 2017 | [–]

I'm using Trezor, I believe it has been preloaded with certain websites so it knows Github and Google and the likes.

It also shows parts of the public key (or so I believe, it is a unique identifier) per website.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact