yubikeys already know who they are authenticating to. the relying party is verified as part of the FIDO2/CTAP2 protocol