Hacker News new | ask | show | jobs
by ryukafalz 1248 days ago
Wait, I don't get it. I understand that the server is signing a challenge with a key presumably known to the client. But why can't the app submit the challenge programmatically upon scanning a QR code? It would still verify the signature!