Unprotected Session Tokens Can Undermine FIDO2 Security

While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor says.

https://www.darkreading.com/identity-access-management-security/unprotected-session-tokens-can-undermine-fido2-security