[password4321]

Identity/privacy: de-anonymizing accounts reusing the same public key.

[lazka]

U2F generates a new keypair for each origin. Public keys are not re-used.