tay00000 wrote:Maybe a little explanation on what I am being asked to review and where is the source code ? I am abit lost reading the thread.
Also, note that the Browser/PC to U2F card/device does not use any sort of Secure Channel Protocol of any sort. They are done over plain APDU channels which I have tried to raise attention to the FIDO Alliance but nobody bothers anyway.
Thank you for your reply.