Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So is the main difference between FIDO U2F and regular TOTP simply the addition of the HMAC-SHA256 of the domain on the server side?

Is there a requirement that FIDO be implemented on a hardware device?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: