On: Owners of 1-Time Passcode Theft Service Plead Guil...

[lxgr]

Woah, they actually do! Thank you! I was certain that no US bank supported WebAuthN yet.

They also do seem to check that it's actually a hardware key, i.e. software authenticators like Google's or Apple's default solutions don't work.