Hacker News new | ask | show | jobs
by angrygoat 3446 days ago
U2F knocks this on the head - a MITM site won't have the secret required to generate the token.