#thaks

:hacker_p: :hacker_f: :hacker_t:pft@infosec.exchange
2025-05-12

Anyone familiar with #FIDO2 / #Passkeys could you please #help me here?

Accoding to Yubico docs on Passkey, the client/client device uses #CTAP2 to communicate with platform authenticators. This sounds a bit strange to me, aren't there internal APIs on the platform that are called here? Isn't CTAP2 exclusive to #roaming authenticators?

#advice #thaks

developers.yubico.com/Develope

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst