WebAuthn (the Web Authentication API) allows browsers to make use of hardware authenticators such as the Yubikey or a mobile phone's biometrics like a thumbprint reader or facial recognition.
I’ve been interested to see Aaron’s opinion of this when I saw it come across my radar the other day. Glad to have a simple overview of it’s functionality now, particularly from someone who’s literally written the book on authentication.
