[ravenstine]

I didn't even realize web USB was a thing now. I remember it being talked about, but I must have missed the HN conversation when Chrome implemented it.

So does Chrome ask for permission to allow USB access? Or maybe there's something about this I'm not getting.

[pfg]

There is a permission prompt, but it's fairly easy to convince users to accept it during a login attempt when they're expecting their USB U2F device to be used.