> Identities cannot be linked
Yes, they can. Quite obviously they can and all it takes is even a modicum of cooperation. We have already extensively seen corporations love to cooperate when it comes to compromising information that belongs to you.
Yes, they can. Quite obviously they can and all it takes is even a modicum of cooperation. We have already extensively seen corporations love to cooperate when it comes to compromising information that belongs to you.
Attackers (even if they control several major outfits like say Microsoft) are not going to succeed in a correlation attack. Roughly what they're doing is like trying to guess the AES keys.
This is in stark contrast to passwords of course, where correlation is so high that haveibeenpwned is worth existing...
Please, explain to me how an arbitrary number of RPs can collude to link a FIDO2 identity.