3 ms·

U2F isn't a Google product. Virtually all new major browser features are built according to standards, proposals, or explicit extensions platforms. See https:/

by sowbug 9y ago

U2F isn't a Google product. Virtually all new major browser features are built according to standards, proposals, or explicit extensions platforms. See https://www.w3.org/TR/ https://www.w3.org/TR/, where it's very easy to map recent browser features to standards or healthy proposals. Your proselytizing would be more appropriate in Redmond, Washington in 2007. I'm not sure what gives you the impression that successful standards are developed in a vacuum. You're right that some are, but most of those are terrible technologies that were designed by the "hard work" you think got us where we are today. The rest -- the good ones -- are battle-tested through gradual deployment and iterative improvement, eventually emerging nearly unrecognizable from their original vision, but genuinely useful and usable. Only then does the "hard work" of advocacy begin.

chimeracoder 9y ago
> U2F isn't a Google product. The point is that U2F on Google logins only works in Chrome. Firefox supports U2F, but Google's implementation only works with Chrome.
- detaro 9y ago
  As far as I know, Firefox does not implement U2F exactly (one of the reasons support for it isn't enabled by default): https://twitter.com/jamespugjones/status/931324766782332928 https://twitter.com/jamespugjones/status/931324766782332928
  - chimeracoder 9y ago
    > As far as I know, Firefox does not implement U2F exactly (one of the reasons support for it isn't enabled by default): https://twitter.com/jamespugjones/status/931324766782332928 https://twitter.com/jamespugjones/status/931324766782332928 Sort of. It's true that Firefox doesn't enable U2F by default (yet), but that's actually unrelated to the reasons that it doesn't work on Google domains. The real reason that Google's U2F only works in Chrome is that they rely on non-standard implementation details: https://twitter.com/ManishEarth/status/931534674224062464 https://twitter.com/ManishEarth/status/931534674224062464 For contrast, you can use U2F on Fastmail and Github in Firefox, because they don't rely on non-standard behavior.

by sowbug 9y ago

chimeracoder 9y ago

> U2F isn't a Google product. The point is that U2F on Google logins only works in Chrome. Firefox supports U2F, but Google's implementation only works with Chrome.

detaro 9y ago
As far as I know, Firefox does not implement U2F exactly (one of the reasons support for it isn't enabled by default): https://twitter.com/jamespugjones/status/931324766782332928 https://twitter.com/jamespugjones/status/931324766782332928
- chimeracoder 9y ago
  > As far as I know, Firefox does not implement U2F exactly (one of the reasons support for it isn't enabled by default): https://twitter.com/jamespugjones/status/931324766782332928 https://twitter.com/jamespugjones/status/931324766782332928 Sort of. It's true that Firefox doesn't enable U2F by default (yet), but that's actually unrelated to the reasons that it doesn't work on Google domains. The real reason that Google's U2F only works in Chrome is that they rely on non-standard implementation details: https://twitter.com/ManishEarth/status/931534674224062464 https://twitter.com/ManishEarth/status/931534674224062464 For contrast, you can use U2F on Fastmail and Github in Firefox, because they don't rely on non-standard behavior.