Re:What I Wish I Knew About U2F and Other Hardware MFA Proto...
by shaicoleman on Friday April 16, 2021 @08:37PM
(#26840603)
Unfortuately WebAuthn with the native keystores requires Bluetooth, which is a constant source of pain. That's a deal-breaker for me.
[ Parent
| on HN ]
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto...
by jrockway on Friday April 16, 2021 @08:45PM
(#26840648)
I don't think that's true. I just logged into my own WebAuthn implementation via my iPhone with an NFC security key. (Bonus points: the key was enrolled on my PC.)
The server operator can choose to reject NFC, but the implementation/standard doesn't require that behavior.
Edit: Actually, I don't understand your question. Are you trying to authenticate on a PC using your phone as the security key? If so, I don't know how to do that. I just enroll Windows Hello and Face ID.
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto...
by tialaramex on Saturday April 17, 2021 @12:05AM
(#26841493)
Google built a not as yet standard way for Chrome on a PC to reach out to a Phone and get WebAuthn credentials that way. It has to talk to the nearby phone somehow and so Bluetooth comes into the picture. I've never used this, and I don't know anybody who has, my Security Key plugs into USB, my cheaper FIDO dongle likewise, no Bluetooth here.
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto...
by Rafert on Saturday April 17, 2021 @01:51PM
(#26846078)
I think you're confusing the cloud-assisted Bluetooth (caBLE) transport with actual built-in device keystores. Google is testing this on their properties while it's being standardized in CTAP and WebAuthn, see https://github.com/w3c/webauthn/issues/1381