Conversation

This Tweet was deleted by the Tweet author. Learn more

Replying to

@octal

U2F is definitely more secure than TOTP and wouldn't collect more data.

Replying to

and

They have a U2F implementation via the hardware-backed keystore in the device now too. On most devices, that means the TrustZone-based keystore, but it uses the StrongBox Keymaster instead for an HSM-based keystore on the few devices providing it like the Pixel 3 and 3a.

11:35 PM · May 19, 2019Twitter Web Client

Replying to

and

support.google.com/accounts/answe is about that fairly new feature. It's a replacement for the older Google Prompt. I plan on implementing something comparable without the dependency on Google services or the current limitation of it only being usable for securing a Google account.