Preprint
Sep 2026
Beyond the Trust Boundary: A Critical Reassessment of the FIDO2 Threat Model
This work critically reassess the FIDO2 threat model and shows that several commonly assumed security properties do not hold under realistic deployment conditions, and concludes that effective FIDO2 security requires layered mitigations covering the browser, operating system, hardware, protocol stack, and metadata infr...
Aditya Mitra, K. Abhiram, S. C. Sethuraman et al.
· 0 citations