Web Authentication is a web standard published by the World Wide Web Consortium. It defines an API that websites use to authenticate with WebAuthn credentials and outlines what WebAuthn authenticators should do. From Wikipedia
A proof-of-concept using malicious extensions to intercept WebAuthn calls highlights the need for tighter browser controls.