• Natanael@infosec.pub
    link
    fedilink
    arrow-up
    1
    ·
    6 hours ago

    TOTP can be phished remotely, passkeys / hardware security keys can’t (need to get malware into the users’ computer instead)