GitHub Supports Web Authentication (WebAuthn) for Security Keys

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by icelancer on Wednesday August 21, 2019 @09:18PM (#20763741)

>> Yes, and to make it worse, they used user agent sniffing instead of feature detection even though it work fine in Firefox.

My bank and my retirement accounts do this too. It's infuriating. I switched to Firefox recently due to failures in Chrome Sync and now I get this as a reward. Wonderful.

[ Parent | on HN ]

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by sebazzz on Thursday August 22, 2019 @01:04AM (#20764801)

Luckily Firefox features per-domain overriding of the use agent: general.useragent.override.[domain]

[ Parent | on HN ]

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by rehemiau on Thursday August 22, 2019 @01:43AM (#20765006)

Currently using this on Firefox for Android through an extension, works great: https://addons.mozilla.org/en-US/firefox/addon/uaswitcher/

[ Parent | on HN ]

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by icelancer on Thursday August 22, 2019 @02:08AM (#20765120)

Just tried this with my Yubikey Nano and Vanguard Investments, after changing my u2f to "true" in about:config. Does not work at all. Vanguard shows the Yubikey login prompt but it doesn't activate the Yubikey, and pushing the key just spits out a OTP and dumps it to the browser search bar. Oh well.

[ Parent | on HN ]

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by richipargo on Thursday August 22, 2019 @02:58AM (#20765370)

I used to have this issue but in my case it just meant I was missing some OS dependencies so it might vary on a case by case

[ Parent | on HN ]