On: Google: Security Keys Neutralized Employee Phishin...

[Eridrus]

It seems odd to focus on physical tokens, when this could just as easily be built into the Browser/OS.

Sure, you also get some additional resistance when your machine is hacked, but it's pretty marginal compared to the phishing benefit.

[edraferi → Eridrus]

I think part of it is the secure element. Apple is moving that direction with TouchID on MacBooks.