#dev 2021-03-10

2021-03-10 UTC

aaronpk the takeaway is that each domain you use a webauthn key with gets its own credential and isn't shared across domains. it's the reason those aren't phishable