this post was submitted on 15 Oct 2024
156 points (91.9% liked)

Technology

58678 readers
3963 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
156
The War on Passwords Is One Step Closer to Being Over (www.wired.com)
submitted 1 day ago by [email protected] to c/[email protected]
104 comments fedilink hide all child comments
 

“Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced on Monday.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 4 points 1 day ago (1 children)

Meanwhile mobile Firefox doesn't even support YubiKey / FIDO2 for some godforsaken reason.

[–] [email protected] 3 points 1 day ago* (last edited 18 hours ago) (1 children)

~~This is straight-up wrong.~~I use FIDO2 and Yubico OTP auth in Firefox desktop on a weekly basis.

~~Are you sure you're not using a hardened fork or tinkered with your about:config?~~

The main thing that Firefox frustratingly does not support is PRF, which is needed for encrypting data with FIDO-compatible devices, but they are working on that.

Edit: OP said mobile Firefox and I missed that. Added clarification.

[–] [email protected] 0 points 1 day ago* (last edited 1 day ago) (1 children)
[–] [email protected] 1 points 19 hours ago (1 children)

Ah. If we're talking mobile, all bets are off. FIDO prompts require Apple and Google to provide the necessary APIs for third-party devs to use, and are still somewhat new. It's likely that since iOS browsers are still just re-skinned WebKit (until the EU stuff settles and Mozilla implements Gecko on iOS), FF on iOS can leverage the OS APIs, but making it work with Gecko on Android requires more work.

I was referring to desktop, where those limitations aren't a hindrance.

[–] [email protected] 1 points 18 hours ago* (last edited 18 hours ago)

Yep, I had said

mobile Firefox

Just saying it's sad that FF mobile on Android is basically the only time it doesn't work.