As authentication factors, I know the following
- You are (e.g. Biometrics)
- You have (e.g. USB)
- You know (e.g. Password)
If I use a FIDO2 certified fingerprint reader for password-less authentication with user verification required option, can I call it "Two-factor authentication by You Are, and You Have"?
FIDO2 device has Biometric information inside. If the server has no biometric information for authentication, can I call it Biometric authentication?