Topic: webauthn

• Phishing-resistant sign-in with WebAuthn and passkeys

  WebAuthn authenticates with a per-site public-key pair: the browser only lets a credential be used by origins under the relying party ID it was registered for, and the authenticator signs a server challenge, so a look-alike site obtains nothing replayable; passkeys are discoverable WebAuthn credentials, often synced across a user's devices.

  article · en · unreviewed

Machine-readable: JSON