[quickcheck]

I thought ‘public’ means it can be shared widely without there being a risk to the private key. What threat model would consider it a risk to have a public key exposed?

[password4321]

Identity/privacy: de-anonymizing accounts reusing the same public key.

[lazka]

U2F generates a new keypair for each origin. Public keys are not re-used.