I've been reading both FIDO and FIDO2 specs for a while tring to understand the similarities and differences between both. Here is how I broke it down so far:
- FIDO: First iteration in creating a cross industry standard for passwordless / 2fa experience (with UAF and U2F)
- FIDO2: Second iteration (with CTAP and Webauthn)
- CTAP: specifies a HID protocol for FIDO2
Do you think this is accurate? Any other information you think is useful?