122
edits
Security/Web Authentication: Difference between revisions
Security/Web Authentication (view source)
Revision as of 17:26, 25 September 2020
, 25 September 2020fix the links
(add gdrive link to keystore) |
(fix the links) |
||
| Line 1: | Line 1: | ||
Password authentication is known to be a security liability on the Web. The [ | Password authentication is known to be a security liability on the Web. The [https://www.w3.org/TR/webauthn/ W3C Web Authentication Working Group] is developing a specification for using Scoped Credentials to supplement or replace passwords. Mozilla intends to continue supporting the Web Authentication (WebAuthn) specification. | ||
== Useful testing sites == | == Useful testing sites == | ||
| Line 23: | Line 23: | ||
On Windows 10, Firefox supports using Windows Hello for WebAuthn, which provides support for many compliant devices as well as built-in platform authenticators. | On Windows 10, Firefox supports using Windows Hello for WebAuthn, which provides support for many compliant devices as well as built-in platform authenticators. | ||
On other desktop platforms, Firefox uses [ | On other desktop platforms, Firefox uses [https://github.com/mozilla/authenticator-rs the rust authenticator-rs package] for WebAuthn, which as of Sept 2020 supports CTAP1 (U2F) devices over USB. | ||
== Mobile platforms == | == Mobile platforms == | ||
Firefox for Android (Fenix) supports the [ | Firefox for Android (Fenix) supports the [https://developers.google.com/identity/fido Google Play Services FIDO2 authenticator] for WebAuthn, which provides support for many compliant devices as well as built-in platform authenticators such as fingerprint sensors. | ||
=== Allow-listing === | === Allow-listing === | ||
| Line 135: | Line 135: | ||
}; | }; | ||
The signing key for this userdebug build is available for internal use; contact Crypto Engineering or [ | The signing key for this userdebug build is available for internal use; contact Crypto Engineering or [https://drive.google.com/drive/folders/1ojNwwwQ8RHEJAc-62CM5erd5Ocw-wUVs?usp=sharing use this internal link]. | ||