Hacker News Reader

Didn't this page used to say whether or not a site supported U2F specifically or was that some other very similar looking page?

Its unfortunate that they don't have this information. I would switch services to a site that specifically supports U2F/FIDO/FIDO2 but not to a site that uses a random proprietary hardware token that is still vulnerable to phishing.

View on HN

Wouldn't that fall under the "Hardware Token" column, or is that a different technology?

I'm trying to say that all hardware tokens are not created equally. A hardware RSA TOTP-esque fob offers no phishing protection where as a FIDO key does. Its unfortunate this site doesn't distinguish between those two cases.

Ah, thanks for the clarification. I didn't read/parse your original comment properly.

Reply on news.ycombinator.com