Why everyone working with the government doesn't use hardware keys without passwords so that fishing is useless?
They mentioned this was a pain in the ass, and a very weird restriction since technically any member of the public can ask for a copy of their emails via FOIA.
The article itself says that 100% phishing resistance is impossible. So I stand by my arguement that if you give an idiot a Yubikey, it still doesnt save them from themselves.
>Does this technology eliminate all risk? No. As this becomes widely deployed new attacks will be developed, but it will be MUCH harder for the cyber attacker.
> FIDO is extremely resistant to phishing attacks but adopting FIDO does not mean your organization is secure against phishing.