News for hackers. Stuff that matters.

A comment on Passkeys: The Beginning of the End of the Password. Parent comment

Re:Passkeys: The Beginning of the End of the Password by judge2020 on Wednesday May 03, 2023 @01:09PM (#35804890)
> it just said I already had a registered key on this device

Is this Android? Because, before this change, there was no way to register a real WebAuthn-based passkey with Google, at least when I was trying with chrome (it did not prompt the webauthn popup, just the OS-native security key popup).

[ Parent | on HN ]
Re:Passkeys: The Beginning of the End of the Password by ghancock on Wednesday May 03, 2023 @02:36PM (#35806016)
This was on an iPad. My experience before had been that I was able to register an iCloud passkey for Google 2SV when using Safari on iOS/iPadOS, but I was unable with Chrome.

At that time, I inspected the registration request Google sent to Chrome and found it was passing a private option that Chrome recognized. According to what I found in web searches for it, the option created a legacy U2F key, and they needed to do that because there were existing Android devices that they could not upgrade and that would not support log-in with WebAuthn keys.

[ Parent | on HN ]