https://github.com/BryanJacobs/FIDO2Applet/blob/main/docs/security.md?plain=1#L111
The MITM traffic can just get the 16-bytes with ECDH's shared-secret still, I think this treat should be belong to malware or compromised client parts.
Reactions are currently unavailable
https://github.com/BryanJacobs/FIDO2Applet/blob/main/docs/security.md?plain=1#L111
The MITM traffic can just get the 16-bytes with ECDH's shared-secret still, I think this treat should be belong to malware or compromised client parts.