Comment by smw

Doesn't work for FIDO-based tokens, they auth the site as well, so won't send anything to phishing site.