[sam_lowry_]

Listening to local USB port? Hm... Why should I listen to a local USB port to exchange keys in a PKI? This only proves my point that WebAuthn is about hardware replacing passwords.

[nickray]

Yes, WebAuthn is about getting rid of passwords. They're a bad idea, for most people, in most situations.