2FA privacy analysis (W3C WebAuthn, FIDO2 etc)
Is there any formal analysis of the privacy claims about the various 2FA protocols, like W3C WebAuthn, FIDO2, or whatever the different Yubikeys use. As an example, a user might've a FIDO2 device with which they login to both personal …