WebAuthn: Difference between revisions
m Added what I think was a missing preposition ("by"). |
No edit summary |
||
| Line 4: | Line 4: | ||
==Application and device support== | ==Application and device support== | ||
The WebAuthn Level 1 standard was published as a Candidate Recommendation by the [[Web Authentication Working Group]] on March 20, 2018.<ref name="webauthn"/> [[Google Chrome]] has supported WebAuthn since | The WebAuthn Level 1 standard was published as a Candidate Recommendation by the [[Web Authentication Working Group]] on March 20, 2018.<ref name="webauthn"/> The desktop version of [[Google Chrome]] has supported WebAuthn since version 67.<ref name="chrome-support">{{cite web|url=https://developers.google.com/web/updates/2018/05/webauthn|title=Enabling Strong Authentication with WebAuthn|first=Christiaan |last=Brand|website=Google Developers|date=2018-06-03|accessdate=2018-06-25}}</ref> [[Firefox|Mozilla Firefox]], which had not fully supported the previous FIDO U2F standard, included and enabled WebAuthn in Firefox version 60, released on May 9, 2018.<ref>{{cite web|url=https://www.cnet.com/news/firefox-moves-browsers-into-the-post-password-future-with-webauthn/|title=Firefox moves browsers into post-password future with WebAuthn tech|first=Stephen|last=Shankland|website=CNET|date=2018-05-09|accessdate=2018-05-11}}</ref> The current [[Windows Insider]] release of [[Microsoft Edge]] implements a version of WebAuthn that works with both [[Windows Hello]] as well as external Security Keys.<ref>{{cite web|url=https://blogs.windows.com/windowsexperience/2018/05/31/announcing-windows-10-insider-preview-build-17682/#oHYCS0GkF95OMzKH.97|title=Announcing Windows 10 Insider Preview Build 17682|author=Sarkar, et. al.|publisher=Microsoft|date=2018-05-23|accessdate=2018-06-25}}</ref> Support that matches the published standard is expected later in 2018.<ref name="chrome-support"/> | ||
Existing FIDO U2F | Existing FIDO U2F Security Keys are largely compatible with the WebAuthn standard, though WebAuthn added the ability to reference a unique per-account "user handle" identifier, which older hardware tokens are unable to store.<ref name="webauthn"/> The first new token able to handle the new "FIDO2" style of key storage is the second-generation [[YubiKey|Security Key]] by Yubico, announced on April 10, 2018.<ref>{{cite press release|url=https://www.yubico.com/press-releases/280530/|title=Yubico Launches New Developer Program and Security Key for FIDO2 and WebAuthn W3C Specifications|date=2018-04-10|accessdate=2018-05-11}}</ref> | ||
[[Dropbox (service)|Dropbox]] announced support for WebAuthn logins (as a 2nd factor) on May 8, 2018.<ref>{{cite web|url=https://blogs.dropbox.com/tech/2018/05/introducing-webauthn-support-for-secure-dropbox-sign-in/|title=Introducing WebAuthn support for secure Dropbox sign in|first=Brad|last=Girardeau|publisher=Dropbox|work=Dropbox Tech Blog|date=2018-05-08|accessdate=2018-05-11}}</ref> | [[Dropbox (service)|Dropbox]] announced support for WebAuthn logins (as a 2nd factor) on May 8, 2018.<ref>{{cite web|url=https://blogs.dropbox.com/tech/2018/05/introducing-webauthn-support-for-secure-dropbox-sign-in/|title=Introducing WebAuthn support for secure Dropbox sign in|first=Brad|last=Girardeau|publisher=Dropbox|work=Dropbox Tech Blog|date=2018-05-08|accessdate=2018-05-11}}</ref> | ||
| Line 23: | Line 23: | ||
*[https://www.w3.org/TR/webauthn/ Web Authentication: An API for accessing Public Key Credentials Level 1] | *[https://www.w3.org/TR/webauthn/ Web Authentication: An API for accessing Public Key Credentials Level 1] | ||
*[https://www.w3.org/Webauthn/ Web Authentication Working Group] | *[https://www.w3.org/Webauthn/ Web Authentication Working Group] | ||
*[https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API Web Authentication API on MDN] | |||
[[Category:World Wide Web Consortium standards]] | [[Category:World Wide Web Consortium standards]] | ||
[[Category:Internet security]] | [[Category:Internet security]] | ||