Post #4238224
2026-07-30 07:26 UTC
@jana@social.jsteuernagel.de Ahh it looks like what happens is that a caBLE tunnel is setup (which btw, still goes via google, sorry to let you know). Then via that caBLE tunnel, your phone can use the yubikey to sign the request since cable is pretty much ctap2-over-noise-tunnel-started-by-bluetooth-qr-magic.
Replies (1)
-
@jana@social.jsteuernagel.de 2026-07-30 07:38
@firstyear@infosec.exchange Good to know, thanks! Though as the app uses microGs implementation of the fido2 service and the connection is established directly between the devices, I don't understand at which point Google is still involved?