WebAuthn: Difference between revisions
m →Overview: trim parenthetical remark |
→Overview: citations needed |
||
| Line 27: | Line 27: | ||
The WebAuthn Relying Party indicates its intentions to the WebAuthn Client (i.e., the browser) via [[JavaScript]]. The WebAuthn Client communicates with the authenticator using a JavaScript [[Application programming interface|API]] implemented in the browser. The authenticator conforms to the FIDO [[Client to Authenticator Protocol]] 2.0. | The WebAuthn Relying Party indicates its intentions to the WebAuthn Client (i.e., the browser) via [[JavaScript]]. The WebAuthn Client communicates with the authenticator using a JavaScript [[Application programming interface|API]] implemented in the browser. The authenticator conforms to the FIDO [[Client to Authenticator Protocol]] 2.0. | ||
WebAuthn does not strictly require a roaming hardware authenticator. Alternatively, a software authenticator (implemented on a smartphone, e.g.) or a platform authenticator (i.e., an authenticator implemented directly on the WebAuthn Client Device) may be used. Relevant examples of platform authenticators include Windows Hello and the [[Android operating system]]. | WebAuthn does not strictly require a roaming hardware authenticator. Alternatively, a software authenticator (implemented on a smartphone, e.g.) or a platform authenticator (i.e., an authenticator implemented directly on the WebAuthn Client Device) may be used. Relevant examples of platform authenticators include Windows Hello{{Citation needed|date=March 2019}} and the [[Android operating system]].{{Citation needed|date=March 2019}} | ||
The illustrated flow relies on PIN-based user verification, which is only a modest improvement in usability over ordinary password authentication. The use of [[biometric]]s for user verification can significantly improve the usability of WebAuthn.{{Citation needed|date=March 2019}} | The illustrated flow relies on PIN-based user verification, which is only a modest improvement in usability over ordinary password authentication. The use of [[biometric]]s for user verification can significantly improve the usability of WebAuthn.{{Citation needed|date=March 2019}} | ||