WebAuthn: Difference between revisions
→top: removed ref-less sentence on hardware authenticators – a more thorough discussion is needed, as the hardware needs to be unconnected to the net and other devices, and doesn't help if the authentication is on fake logins/transactions; also changed phishing attacks → some phishing attacks for much the same reason: you might authenticate on the right site, but be presented with bogus information |
`thumb` requires `|class=skin-invert-image` (Help:Extended image syntax#Class) #wAwB |
||
| Line 103: | Line 103: | ||
===Authentication=== | ===Authentication=== | ||
[[File:Passwordless_Web_Authentication.svg | [[File:Passwordless_Web_Authentication.svg|class=skin-invert-image|thumb|upright=1.2|right|A typical Web Authentication (WebAuthn) flow]] | ||
[[File:Android Credential Manager Conditional UI on Android screenshot (cropped).webp|thumb|upright=1.2|Example of WebAuthn authentication with Android Credential Manager]] | [[File:Android Credential Manager Conditional UI on Android screenshot (cropped).webp|thumb|upright=1.2|Example of WebAuthn authentication with Android Credential Manager]] | ||