so if an attacker puts up an impostor website, the key won’t provide credentials that they can use to get your real mail. App will
-
-
-
Thanks so much for this. That’s something that I never understood before.
- Show replies
New conversation -
-
-
the browser passes a challenge to the yubikey that includes the URL
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
the world needs a really nice U2F explainer. But that’s the gist of it
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I’m referring to the bare-bones blue yubikey that just does U2F
-
Yeah, that was to
@djcp and why his key is emitting keystrokes (unrelated function). My wording of "must" was ambiguous sorry.
End of conversation
New conversation -
-
-
So this thingy only works if I'm using Chrome?
-
correct. Firefox support is coming soon
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.