WebAuthn
Google: Security Keys Neutralized Employee Phishing — Krebs on Security