3 ms·
There is no reason software based U2F tokens can't exist. We actually released one just this week: https://github.com/github/softu2f https://github.com/github/s
by ptoomey3 9y ago
There is no reason software based U2F tokens can't exist. We actually released one just this week: https://github.com/github/softu2f https://github.com/github/softu2f. It went through a certification process and was certified as a valid FIDO U2F implementation. I'd love to see more and more non-dongle based solutions going forward.
- jimktrains2 9y agoThat seems to be the only one out there, hence my conception that it's mainly a hardware-key. I would also be interested in seeing more cross-platform software U2F implementations!
- ptoomey3 9y agoFor sure, software based tokens are not the norm (yet). Part of our hope with releasing a software based token is to push the security vs. user experience conversation forward. Sure, hardware tokens are great. But, they don't have the best UX and have a pretty steep barrier to entry. Hopefully Soft U2F helps to spawn a more varied set of solutions. Over time, browsers and password managers could integrate these kinds of features. For example, https://crbug.com/678128 https://crbug.com/678128 is a tracking issue for implementing U2F in Chrome itself, which would be great.
- jimktrains2 9y agoComplete aside, I initially got extremely angry at you before even reading your post. Pat Toomey, Senate Class 3, is unfortunately one of my Senators. I'm pretty sure he's doesn't work at Github, though :)
- ptoomey3 9y agoYou aren't the first: https://twitter.com/search?f=tweets&q=patricktoomey%20sentoomey&src=typd https://twitter.com/search?f=tweets&q=patricktoomey%20sentoo... :-)