I've been looking at the FIDO alliance's U2F specification and there's something which I can't seem to find documented.
If I was to use a Yubikey or something similar as part of the authentication when registering for a service on my desktop, how would I then be able to authenticate myself if I wanted to log in on my phone?
My understanding is that the private key would be stored on the current device when you registered and the public key would be provided to the service. This would mean that to allow me to authenticate myself on different devices I would need to copy the private key from my desktop to my phone
Is this correct or have I misunderstood something around the FIDO specification?