Security/CryptoEngineering: Difference between revisions

Jump to navigation Jump to search

Security/CryptoEngineering (view source)

Revision as of 14:24, 25 September 2017

1,131 bytes removed ,  25 September 2017
→‎Web Authentication: Note new landing dates
(Update dates)
(→‎Web Authentication: Note new landing dates)
Line 37: Line 37:
* 2017 Q2: Support USB HID U2F devices on Linux, Mac OS X, and Windows. [https://github.com/jcjones/u2f-hid-rs/ rust u2f-hid-rs library]
* 2017 Q2: Support USB HID U2F devices on Linux, Mac OS X, and Windows. [https://github.com/jcjones/u2f-hid-rs/ rust u2f-hid-rs library]
* 2017 Q2-3: Integrate '''USB HID U2F hardware support''' into Firefox.
* 2017 Q2-3: Integrate '''USB HID U2F hardware support''' into Firefox.
** [https://bugzilla.mozilla.org/show_bug.cgi?id=1380270 Bug 1380270: Add libudev support to the tree]
** Done in '''Firefox 57'''.
** [https://bugzilla.mozilla.org/show_bug.cgi?id=1388843 Bug 1388843: Add u2f-hid-rs rust library to the tree]
** [https://bugzilla.mozilla.org/show_bug.cgi?id=1388851 Bug 1388851: Tie u2f-hid-rs rust library into WebAuthn's U2F HID Manager]
** Currently expected to land in '''Firefox 58'''.
* 2017 Q2-3: Update to Working Draft 5 of the WebAuthn JS API.
* 2017 Q2-3: Update to Working Draft 5 of the WebAuthn JS API.
** Done in Firefox 56
** Done in '''Firefox 56'''
* 2017 Q3: Integrate hardware support with the '''FIDO U2F v1.1 JS API'''
* 2017 Q3: Integrate hardware support with the '''FIDO U2F v1.1 JS API'''
** [https://bugzilla.mozilla.org/show_bug.cgi?id=1245527 Bug 1245527: Tie U2F JS API into WebAuthn's U2F HID Manager]
** Done in '''Firefox 57'''.
*** This is probably going to make it into Firefox 57, but won't enable hardware support until [https://bugzilla.mozilla.org/show_bug.cgi?id=1388851 Bug 1388851] also lands.
* 2017 September: Interoperability testing for WebAuthn.
* 2017 September: Interoperability testing for WebAuthn.
* 2017 (late): Update to the Candidate Recommendation of the WebAuthn JS API.
* 2017 (late): Update to the Candidate Recommendation of the WebAuthn JS API.
Line 53: Line 49:
* 2018: Support U2F hardware for Firefox for Android.
* 2018: Support U2F hardware for Firefox for Android.
** [https://github.com/jcjones/u2f-hid-rs/issues/42 u2f-hid-rs Issue #42]
** [https://github.com/jcjones/u2f-hid-rs/issues/42 u2f-hid-rs Issue #42]


All of the above dates are for landing in Firefox Nightly.  
All of the above dates are for landing in Firefox Nightly.  
Line 59: Line 54:
'''Goal''': permit use of U2F tokens via a user-controllable preference (not on by default) in Firefox 56 or 57, and Web Authentication (on by default) in Firefox 57 or 58. (See [[RapidRelease/Calendar]])
'''Goal''': permit use of U2F tokens via a user-controllable preference (not on by default) in Firefox 56 or 57, and Web Authentication (on by default) in Firefox 57 or 58. (See [[RapidRelease/Calendar]])


=== Unstable Build: 30 August 2017 ===
=== Using U2F / WebAuthn ===
 
This build contains all of the above patches for Bug 1380270, Bug 1388843, Bug 1388851, and Bug 1245527. It also generally has some small fixups that will also make it somewhere or other.


* OSX: https://queue.taskcluster.net/v1/task/IMBLy88oQf29Aa2xI5kucQ/runs/0/artifacts/public/build/target.dmg
Enable the preferences in '''about:config''':
* Windows 64: https://queue.taskcluster.net/v1/task/O8mFlCIISO-A8ej1uo8TQg/runs/0/artifacts/public/build/target.zip
* security.webauth.u2f
* Linux: '''Unavailable''' at TaskCluster for now, due to [https://treeherder.mozilla.org/logviewer.html#?job_id=126547385&repo=try&lineNumber=8105 libudev not being available to the rust compiler]
* security.webauth.webauthn


Enabling debugging (example for OSX):
Enabling debugging (example for OSX):
Line 78: Line 71:
* https://webauthn.bin.coffee/wd-05/
* https://webauthn.bin.coffee/wd-05/


It does not work on Facebook; there are issues beyond browser detection that haven't been analyzed yet.
It does not work on Facebook or Google Accounts; there are issues beyond browser detection that haven't been analyzed yet.


=== Tracked Bugs ===
=== Tracked Bugs ===
Jcjones
122

edits

Retrieved from "https://wiki.allizom.org/Special:MobileDiff/1181154"

Navigation menu