https://www.w3.org/TR/webauthn/ https://www.imperialviolet.org/2017/08/13/securitykeys.html

Stuff oauth - go u2f