Re:Face ID and Touch ID for the Web
by tialaramex on Wednesday June 24, 2020 @03:56PM
(#23633085)
Yup. A site can even say "I want a platform authenticator" or "I specifically don't want a platform authenticator" during registration using the Javascript API.
Most sites should just not care, but it's an option if you've determined there's a specific reason it matters in your application.
Re:Face ID and Touch ID for the Web
by DaiPlusPlus on Wednesday June 24, 2020 @11:43PM
(#23636680)
> A site can even say "I want a platform authenticator" or "I specifically don't want a platform authenticator" during registration using the Javascript API.
Websites should not depend on JavaScript for something that should be able to be done declaratively.
(Amongst other things - we shouldn't need to use `fetch`/`XMLHttpRequest` when a <form> would work just-as-well - but if only <form> let us use more than just GET and POST, and supported more types of serialization, and supported asynchronous form submission - and bring back <keygen>!).
* you don't need the TPM for Windows Hello to act as your security key. I can't enable BitLocker because there's no TPM yet I have Hello enrolled as a key for GH.
I’m not sure if that makes me happy or sad to hear..
Re:Face ID and Touch ID for the Web
by threentaway on Thursday June 25, 2020 @02:14AM
(#23637429)
You can use BitLocker with just a password, not sure why you're implying you need a TPM.
https://www.howtogeek.com/237232/what-is-a-tpm-and-why-does-...
And yes, there is a way to use it without a TPM technically, but it's not accessible by the computer's management GUIs, and you need to create custom GPOs and apply them.
Is this how passwords.google.com prompts me with my Android phone lock when I want to access a password in plaintext? I've always wondered that.
No need to speak roughly.