[simias]

Or maybe logging in ought to be handled directly by the browser in a way that couldn't be highjacked or phished easily. Do we really need a million different implementations of a login form?

[Natanael_L]

UAF/U2F, which conveniently is part of the new webauthn standard that just got released in the latest Firefox update