Beyond the Trust Boundary: A Critical Reassessment of the FIDO2 Threat Model

Aditya Mitra, Kolluru Sai Abhiram, Sibi Chakkaravarthy Sethuraman +1

FIDO2/WebAuthn has been widely deployed as a phishing-resistant authentication scheme. Because FIDO2 relies on public-key cryptography and hardware-backed authenticators, its secur…