[eximius]

FIDO discussed this on their site. It's optional so corporate firewalls that perform MITM can continue to work with U2F.

[exabrial]

... sigh.

[eximius]

I mean, if you want a standard for everyone, it's hard to ignore where most people work.