News for hackers. Stuff that matters.

A comment on Ask HN: Why is WebAuthn so slow to take off?. Parent comment

Re:Ask HN: Why is WebAuthn so slow to take off? by michaelt on Sunday April 23, 2023 @12:39PM (#35677799)
Because Microsoft's implementation is incredibly boneheaded, and doesn't allow the Google-style mechanism of username+password+Yubikey. They only support U2F/Webauthn as an alternative to a password.

I assume Microsoft is hoping to make Windows the main Webauthn provider out there, to tie online identities into the Windows login process for easier tracking/advertising.

[ Parent | on HN ]
Re:Ask HN: Why is WebAuthn so slow to take off? by pQd on Monday April 24, 2023 @01:03AM (#35683845)
Also - thanks to that FIDO2 does not seem to be usable with Microsoft's MS365 services [ Teams, Outlook, Excel etc ] on Android or iOS. there's no way to provide pin for the security key, regardless if it's plugged in via the USB port or used via NFC.

https://learn.microsoft.com/en-us/azure/active-directory/aut...

bummer

[ Parent | on HN ]