5 ms·

Slightly OT, what do people use for U2F, Google Mail and Firefox?

jlgaddis 9y ago
Here's a list of sites that support 2FA, via hardware tokens and other methods: https://twofactorauth.org https://twofactorauth.org
EwanToo 9y ago
Yubico do a short (but I think that's realistic) list of sites that specifically support u2f https://www.yubico.com/solutions/#FIDO-U2F https://www.yubico.com/solutions/#FIDO-U2F
- _Codemonkeyism 9y ago
  Thanks I have a Yubico key and use it with Gmail on Chrome, to better phrase my question: How do I use it with FF? (my main browser).
  - danieldk 9y ago
    On Firefox Nightly, it works without extensions, but you have to set security.webauth.u2f to true in about:config. It only worked with some sites that I tried, for others you probably have to fake the user agent.
    - daenney 9y ago
      Yeah... The Google Cloud Console and Google Accounts do that for one. I can't set up or use my U2F key in anything but Chrome. Hangouts similarly barfs when you're using Firefox because they believe the WebRTC support is missing (instead of checking). Works fine with GitHub though :).
  - nyolfen 9y ago
    lastpass supports yubikeys as 2fa, but you have to have a subscription to premium for it to be enforced. i let mine lapse for a while and it simply stopped making me use my yubikey. i'm not really sure what was going on behind the scenes but it made me a little less confident in the particular aspect of lastpass.
    - r3bl 9y ago
      That was the last drop. I switched to an alternative immediately as soon as I've noticed LastPass requesting premium for something as essential as a 2FA method.
  - anoother 9y ago
    There's an extension: https://addons.mozilla.org/en-GB/firefox/addon/u2f-support-add-on/ https://addons.mozilla.org/en-GB/firefox/addon/u2f-support-a... Works perfectly for me.
    - r3bl 9y ago
      This extension will become deprecated with Firefox 57 (WebExtensions update). Unfortunately, it seems that they've failed with shipping U2F support in Firefox at the time, so the browser support seems to be coming to 58 (currently in Nightly). So, your options in November will be either Firefox ESR or switching to Firefox Beta. EDIT: Source: https://github.com/prefiks/u2f4moz/issues/59#issuecomment-325768286 https://github.com/prefiks/u2f4moz/issues/59#issuecomment-32... EDIT2: My previous coworker also discovered some high-CPU issues with that add-on on Ubuntu, so be aware of that as well: https://github.com/prefiks/u2f4moz/issues/51 https://github.com/prefiks/u2f4moz/issues/51
joatmon-snoo 9y ago
At Google we also use it internally on all corp systems.

Here's a list of sites that support 2FA, via hardware tokens and other methods: https://twofactorauth.org https://twofactorauth.org

EwanToo 9y ago

Yubico do a short (but I think that's realistic) list of sites that specifically support u2f https://www.yubico.com/solutions/#FIDO-U2F https://www.yubico.com/solutions/#FIDO-U2F

_Codemonkeyism 9y ago
Thanks I have a Yubico key and use it with Gmail on Chrome, to better phrase my question: How do I use it with FF? (my main browser).
- danieldk 9y ago
  On Firefox Nightly, it works without extensions, but you have to set security.webauth.u2f to true in about:config. It only worked with some sites that I tried, for others you probably have to fake the user agent.
  - daenney 9y ago
    Yeah... The Google Cloud Console and Google Accounts do that for one. I can't set up or use my U2F key in anything but Chrome. Hangouts similarly barfs when you're using Firefox because they believe the WebRTC support is missing (instead of checking). Works fine with GitHub though :).
- nyolfen 9y ago
  lastpass supports yubikeys as 2fa, but you have to have a subscription to premium for it to be enforced. i let mine lapse for a while and it simply stopped making me use my yubikey. i'm not really sure what was going on behind the scenes but it made me a little less confident in the particular aspect of lastpass.
  - r3bl 9y ago
    That was the last drop. I switched to an alternative immediately as soon as I've noticed LastPass requesting premium for something as essential as a 2FA method.
- anoother 9y ago
  There's an extension: https://addons.mozilla.org/en-GB/firefox/addon/u2f-support-add-on/ https://addons.mozilla.org/en-GB/firefox/addon/u2f-support-a... Works perfectly for me.
  - r3bl 9y ago
    This extension will become deprecated with Firefox 57 (WebExtensions update). Unfortunately, it seems that they've failed with shipping U2F support in Firefox at the time, so the browser support seems to be coming to 58 (currently in Nightly). So, your options in November will be either Firefox ESR or switching to Firefox Beta. EDIT: Source: https://github.com/prefiks/u2f4moz/issues/59#issuecomment-325768286 https://github.com/prefiks/u2f4moz/issues/59#issuecomment-32... EDIT2: My previous coworker also discovered some high-CPU issues with that add-on on Ubuntu, so be aware of that as well: https://github.com/prefiks/u2f4moz/issues/51 https://github.com/prefiks/u2f4moz/issues/51

joatmon-snoo 9y ago

At Google we also use it internally on all corp systems.