Sebastian Johansson

As far as I can tell the issue is that the U2F application only implements CTAP1, while most sites require CTAP2 for new registrations at this point.

It's worth noting that you don't need to add another layer of keys and cryptography on top of this - ActivityPub already gives each user a unique key ([see `publicKey`...

> this also requires fundamentally redefining identity to be rooted in the key, and not the actual id*. the strength and weakness of ActivityPub is that it is part of...

Pretty sure it still uploads things twice - once before processing, once after processing - but S2 may have fixed their version handling.