TOTP is phishable, FIDO2 is not
Open answerExplain why a six-digit TOTP code can be captured by phishing, whereas a FIDO2 key cannot. Base your answer on what the user transmits in each case and on the role of the domain.
Explain why a six-digit TOTP code can be captured by phishing, whereas a FIDO2 key cannot. Base your answer on what the user transmits in each case and on the role of the domain.