6 ms·
Does this mean we can finally login to U2F-required Google accounts from iCal?
by univerio 8y ago
Does this mean we can finally login to U2F-required Google accounts from iCal?
- mediocrejoker 8y agoHopefully someone more knowledgeable will chime in as I'm waiting for FIDO U2F support as well but I think CTAP2 is the browser-to-user layer of FIDO. edit: just tested it on Mojave with gmail and fastmail and it doesn't recognize that the Yubikey has been inserted, so looks like support is not there out-of-the-box
- StavrosK 8y agoAs far as I understand it, it is. That said, I tried to use this for a WebAuthn Django library I'm trying to write and it wouldn't work, as pages wouldn't render at all.
- reaperhulk 8y agoYou need to enable it in Develop->Experimental Features, but also you need to be sure you have a CTAP2 key. "U2F" keys are all CTAP1, which is not supported yet. Yubi's 5 series are CTAP2, as are the blue keys with a 2 printed on them.
- mediocrejoker 8y agoCool I just tried it with Fastmail and a Yubikey 5 and it worked. Gmail however still checks if you're running chrome so it doesn't work.
- agl 8y agoGoogle has not yet transitioned from the U2F API to the Web Authentication API for login so no, not yet. (We're working on it, but there's quite a lot of moving pieces.) Also, as another comment noted, only CTAP2 is supported for the host to authenticator API, and only the newest Yubico tokens support CTAP2.
- apple4ever 8y agoDoes the Titan support CTAP2?