6 ms·

Why does only chrome support the security keys? It seems to imply that apple doesn’t support them very well also. I thought they were more widely supported?

downrightmike 7y ago
FIDO2 etc are widely supported, it is just that their usage is a pain in the ass. Like PGP, the tools to use them suck. Especially for non-technical people, they just won't use them. The real solution is to make using them transparent, which hasn't been solved and there isn't enough uptake for anyone to fix it, because the easy option is to just reuse passwords. Once security keys are that easy, then they'll be used. Even if you use a password manager to generate a 100 char password, who the hell is going to type that into a phone? no one, if they can't find a solution simply, they simply won't use it.
rietta 7y ago
Firefox supports them too, but it has to be enabled. https://support.yubico.com/support/solutions/articles/15000017511-enabling-u2f-support-in-mozilla-firefox https://support.yubico.com/support/solutions/articles/150000... I've run into one important (investment brokerage) site does user-agent sniffing and dropped immediately to calling your registered phone number instead of letting Firefox continue to use the Yubikey that it does actually support.
- closeparen 7y ago
  That would probably be Vanguard, the only retail brokerage implementing non-SMS 2FA as far as I know.
  - LUmBULtERA 7y ago
    Fidelity offers 2FA using the Symantec VIP app.
  - rietta 7y ago
    You guessed very well. I guess I should have just come out and said the name!
idlewords 7y ago
Firefox supports them now. There's supposed to be a Yubikey with a Lightning connector coming out that you can use in an iPhone. Fingers crossed!
- mschuster91 7y ago
  If anything is a bad idea then this. Just takes one fall to kill the connector and lock the user out. "Thanks" to Apple here for locking down NFC (and a smartcard reader for Macbooks), this would make life so much easier...
- bigiain 7y ago
  I hear "its coming" for Safari too - sure some of the developer previews have it (last time I checked you had to spoof your user agent because none of the FIDO sites believed it was gonna work in Safari and didn't offer it...)
  - bigiain 7y ago
    Just in case anyone's still reading here. I can confirm that Safari Technology Preview release 83 works with my Blue Yubi key to do FIDO 2FA with gmail right now...

downrightmike 7y ago

FIDO2 etc are widely supported, it is just that their usage is a pain in the ass. Like PGP, the tools to use them suck. Especially for non-technical people, they just won't use them. The real solution is to make using them transparent, which hasn't been solved and there isn't enough uptake for anyone to fix it, because the easy option is to just reuse passwords. Once security keys are that easy, then they'll be used. Even if you use a password manager to generate a 100 char password, who the hell is going to type that into a phone? no one, if they can't find a solution simply, they simply won't use it.

rietta 7y ago

Firefox supports them too, but it has to be enabled. https://support.yubico.com/support/solutions/articles/15000017511-enabling-u2f-support-in-mozilla-firefox https://support.yubico.com/support/solutions/articles/150000... I've run into one important (investment brokerage) site does user-agent sniffing and dropped immediately to calling your registered phone number instead of letting Firefox continue to use the Yubikey that it does actually support.

closeparen 7y ago
That would probably be Vanguard, the only retail brokerage implementing non-SMS 2FA as far as I know.
- LUmBULtERA 7y ago
  Fidelity offers 2FA using the Symantec VIP app.
- rietta 7y ago
  You guessed very well. I guess I should have just come out and said the name!

idlewords 7y ago

Firefox supports them now. There's supposed to be a Yubikey with a Lightning connector coming out that you can use in an iPhone. Fingers crossed!

mschuster91 7y ago
If anything is a bad idea then this. Just takes one fall to kill the connector and lock the user out. "Thanks" to Apple here for locking down NFC (and a smartcard reader for Macbooks), this would make life so much easier...
bigiain 7y ago
I hear "its coming" for Safari too - sure some of the developer previews have it (last time I checked you had to spoof your user agent because none of the FIDO sites believed it was gonna work in Safari and didn't offer it...)
- bigiain 7y ago
  Just in case anyone's still reading here. I can confirm that Safari Technology Preview release 83 works with my Blue Yubi key to do FIDO 2FA with gmail right now...