Glossary: MFA, Access Control and Passwords

client data

The bundle the browser signs during a WebAuthn login. It holds the type, the challenge and the origin (the page's address), which lets the real site reject signatures made for a lookalike site.