4 ms·

How does the communication between the USB key and Google in a browser work? Will it work on all operating systems and browsers?

r3bl 10y ago
As for the operating systems: in order to use it on your phone, you'll need to be careful to use a YubiKey with NFC support and have a phone that supports NFC. You won't have any trouble using it on Windows/Ubuntu/macOS. As for the browsers: Chrome/Chromium works fine. Firefox has an addon that adds security key support[0]. Unfortunately, this addon has a bug which causes high CPU load[1]. Firefox is also working on adding the native support for this, and I think that their ETA is somewhere in the second half of this year to get this thing to work natively. Unfortunately, even with the U2F addon on Firefox, you still won't be able to use it for Gmail, since Google hardcoded its browser to be the only one with U2F support, so you're going to have to change your user agent in order to use it, or default back to your second method of 2FA (Google Authenticator or something of the sorts). I have no knowledge about the U2F status on Safari and Edge. As far as I was able to discover, the only service that didn't hardcode Chrome as being the only browser at the moment with U2F support is GitHub, and using YubiKeys with Firefox + U2F addon on GitHub works without any issues (other than the occasional high CPU load that I've already mentioned). I wrote a short article on my blog about Yubikey usefulness for my usual setup about a year ago[2]. Things changed slightly to the better since then, but not by a lot. [0] https://addons.mozilla.org/en-US/firefox/addon/u2f-support-add-on/ https://addons.mozilla.org/en-US/firefox/addon/u2f-support-a... [1] https://github.com/prefiks/u2f4moz/issues/51 https://github.com/prefiks/u2f4moz/issues/51 [2] https://blog.r3bl.me/en/yubikey-review/ https://blog.r3bl.me/en/yubikey-review/
- nmjenkins 10y ago
  You can also use U2F on Firefox with FastMail.
- lrvick 10y ago
  I would add that Yubikeys and a number of other tokens work just fine with USB OTG with TOTP if nothing else. If you have a phone with USB Type-C and a Yubikey 4c you can just plug it in direct.
- hdhzy 10y ago
  U2F itself as a browser API is a dead-end and will be replaced with newer FIDO 2 WebAuthentication API, but fear not - it's supposed to be compatible with U2F tokens in use [0]. WebAuthentication will be supported in all major modern browsers [1], it just takes some time to implement. [0]: https://bugzilla.mozilla.org/show_bug.cgi?id=1065729#c254 https://bugzilla.mozilla.org/show_bug.cgi?id=1065729#c254 [1]: https://www.chromestatus.com/feature/5669923372138496 https://www.chromestatus.com/feature/5669923372138496

r3bl 10y ago

As for the operating systems: in order to use it on your phone, you'll need to be careful to use a YubiKey with NFC support and have a phone that supports NFC. You won't have any trouble using it on Windows/Ubuntu/macOS. As for the browsers: Chrome/Chromium works fine. Firefox has an addon that adds security key support[0]. Unfortunately, this addon has a bug which causes high CPU load[1]. Firefox is also working on adding the native support for this, and I think that their ETA is somewhere in the second half of this year to get this thing to work natively. Unfortunately, even with the U2F addon on Firefox, you still won't be able to use it for Gmail, since Google hardcoded its browser to be the only one with U2F support, so you're going to have to change your user agent in order to use it, or default back to your second method of 2FA (Google Authenticator or something of the sorts). I have no knowledge about the U2F status on Safari and Edge. As far as I was able to discover, the only service that didn't hardcode Chrome as being the only browser at the moment with U2F support is GitHub, and using YubiKeys with Firefox + U2F addon on GitHub works without any issues (other than the occasional high CPU load that I've already mentioned). I wrote a short article on my blog about Yubikey usefulness for my usual setup about a year ago[2]. Things changed slightly to the better since then, but not by a lot. [0] https://addons.mozilla.org/en-US/firefox/addon/u2f-support-add-on/ https://addons.mozilla.org/en-US/firefox/addon/u2f-support-a... [1] https://github.com/prefiks/u2f4moz/issues/51 https://github.com/prefiks/u2f4moz/issues/51 [2] https://blog.r3bl.me/en/yubikey-review/ https://blog.r3bl.me/en/yubikey-review/

nmjenkins 10y ago
You can also use U2F on Firefox with FastMail.
lrvick 10y ago
I would add that Yubikeys and a number of other tokens work just fine with USB OTG with TOTP if nothing else. If you have a phone with USB Type-C and a Yubikey 4c you can just plug it in direct.
hdhzy 10y ago
U2F itself as a browser API is a dead-end and will be replaced with newer FIDO 2 WebAuthentication API, but fear not - it's supposed to be compatible with U2F tokens in use [0]. WebAuthentication will be supported in all major modern browsers [1], it just takes some time to implement. [0]: https://bugzilla.mozilla.org/show_bug.cgi?id=1065729#c254 https://bugzilla.mozilla.org/show_bug.cgi?id=1065729#c254 [1]: https://www.chromestatus.com/feature/5669923372138496 https://www.chromestatus.com/feature/5669923372138496