<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>WebAuthn</title><link>https://blog.ast.moe/en/tags/webauthn/</link><description>Recent posts: Gorimuchu</description><generator>Hugo</generator><item><title>I investigated how the YubiKey works.</title><link>https://blog.ast.moe/en/blog/2026-10-07/</link><pubDate>Thu, 08 Oct 2026 06:58:01 +0900</pubDate><guid>https://blog.ast.moe/en/blog/2026-10-07/</guid><description>&lt;p&gt;I was just wondering how a YubiKey actually performs authentication.&lt;/p&gt;
&lt;p&gt;I started using the YubiKey 5C NFC in 2023, and later I also bought a USB‑A model. At the time I introduced it to protect my 1Password account, planning to register one key for everyday carry and another as a spare kept at home. (&lt;a href="https://blog.ast.moe/blog/2023-01-27/"&gt;source&lt;/a&gt;) (&lt;a href="https://blog.ast.moe/blog/2023-03-07/"&gt;source&lt;/a&gt;)&lt;/p&gt;
&lt;p&gt;You plug it into a USB port and touch it when needed. With a smartphone you use NFC. The user interaction is minimal, but I’ve never taken the time to understand exactly what’s happening behind the scenes.&lt;/p&gt;</description></item></channel></rss>