Hacker News Reader

yes. this spec (u2f) makes the hardware part more feasible to implement without needing to enter an OTP. thus enabling 2fa very widely.

It also thwarts phishing and MitM attacks (assuming the browser is not evil), which OTPs do not.