Usage of DPOP: When extractable is set to true Breaks Your Authentication Model

A Deep Dive into WebCrypto Key Security