> The vendors claim that this is to make phishing impossible They do? I don't se... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		lxgr 8 months ago \| parent \| context \| favorite \| on: A Tour of WebAuthn > The vendors claim that this is to make phishing impossible They do? I don't see how, since non-discoverable WebAuthN credentials make phishing just as impossible. The only thing discoverable credentials allow on top of non-discoverable ones is avoiding having the user type in their username or email address.

drhuseynov 8 months ago [–]

yes, that is for "usernameless" login, in addition to passwordless. Does not increase security, improves usability a bit

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact