WebAuthn: Difference between revisions
m →Overview: fix typo |
→Overview: add citation |
||
| Line 27: | Line 27: | ||
The WebAuthn Relying Party indicates its intentions to the WebAuthn Client (i.e., the browser) via [[JavaScript]]. The WebAuthn Client communicates with the authenticator using a JavaScript [[Application programming interface|API]] implemented in the browser. The authenticator conforms to the FIDO [[Client to Authenticator Protocol]] 2.0. | The WebAuthn Relying Party indicates its intentions to the WebAuthn Client (i.e., the browser) via [[JavaScript]]. The WebAuthn Client communicates with the authenticator using a JavaScript [[Application programming interface|API]] implemented in the browser. The authenticator conforms to the FIDO [[Client to Authenticator Protocol]] 2.0. | ||
WebAuthn does not strictly require a roaming hardware authenticator. Alternatively, a software authenticator (implemented on a smartphone, e.g.) or a platform authenticator (i.e., an authenticator implemented directly on the WebAuthn Client Device) may be used. Relevant examples of platform authenticators include | WebAuthn does not strictly require a roaming hardware authenticator. Alternatively, a software authenticator (implemented on a smartphone, e.g.) or a platform authenticator (i.e., an authenticator implemented directly on the WebAuthn Client Device) may be used. Relevant examples of platform authenticators include the [[Android operating system]]<ref>{{cite web |title=Android Now FIDO2 Certified, Accelerating Global Migration Beyond Passwords |url=https://fidoalliance.org/android-now-fido2-certified-accelerating-global-migration-beyond-passwords/ |publisher=[[FIDO Alliance]] |accessdate=6 March 2019 |location=BARCELONA |date=February 25, 2019}}</ref> and Windows Hello.{{Citation needed|date=March 2019}} | ||
The illustrated flow relies on PIN-based user verification, which is only a modest improvement in usability over ordinary password authentication. The use of [[biometric]]s for user verification can significantly improve the usability of WebAuthn.{{Citation needed|date=March 2019}} | The illustrated flow relies on PIN-based user verification, which is only a modest improvement in usability over ordinary password authentication. The use of [[biometric]]s for user verification can significantly improve the usability of WebAuthn.{{Citation needed|date=March 2019}} | ||