nsfmc’s Twitter Archive—№ 5,676

JamyRyals ericlaw U2F ties its response to https domain so you may get asked to press but data will be be meaningless unless attacker controls the orig domain