6 ms·

Unfortunately, Yubikey at least basically only works in Google Chrome, so if you actually want to use your account you have to use methods other than the Yubike

Unfortunately, Yubikey at least basically only works in Google Chrome, so if you actually want to use your account you have to use methods other than the Yubikey.

taeric 7y ago
You can use it in any browser. You have to register it in chrome. Crappy, but not a line in the sand I'm willing to die on.
- tialaramex 7y ago
  Conventionally, one metaphorically chooses a _hill_ to die on, and lines in the sand are only crossed or redrawn, not died on. The insistence on using Chrome is arbitrary and I don't like it. The use of U2F rather than WebAuthn at least has a technical justification (older Android devices can't do WebAuthn, and while it's backward compatible in the sense that you can use a WebAuthn authentication having signed up with U2F, vice versa is not possible, so old Android devices would have a confusing UX behaviour) but the insistence on Chrome is just arbitrary lock-in. I won't be dying on that hill either, but it does suck.
  - techsupporter 7y ago
    > The insistence on using Chrome is arbitrary and I don't like it. Supposedly this limitation is because Firefox doesn't implement the JavaScript calls that permit a U2F-calling site to know the type of U2F key being used and Google wants to enforce, when enrolling for ATP, that at least one of the two keys being enrolled can be used wirelessly (Bluetooth or NFC). I don't agree with it either but will only truly be mad if/when Mozilla implements the requisite call and Google still blocks enrollment without Chrome.
  - everybodyknows 7y ago
    You'd think Ubuntu chromium-browser might be acceptable for Google U2F setup -- but no, not when I tried a couple of months ago.
    - taeric 7y ago
      Worked for me. :( What error did you see?
  - taeric 7y ago
    Ha! That was an amusing mix of phrases. You got what I meant though, and provided some color. Agreed on it sucking.

Unfortunately, Yubikey at least basically only works in Google Chrome, so if you actually want to use your account you have to use methods other than the Yubikey.

taeric 7y ago

You can use it in any browser. You have to register it in chrome. Crappy, but not a line in the sand I'm willing to die on.

tialaramex 7y ago
Conventionally, one metaphorically chooses a _hill_ to die on, and lines in the sand are only crossed or redrawn, not died on. The insistence on using Chrome is arbitrary and I don't like it. The use of U2F rather than WebAuthn at least has a technical justification (older Android devices can't do WebAuthn, and while it's backward compatible in the sense that you can use a WebAuthn authentication having signed up with U2F, vice versa is not possible, so old Android devices would have a confusing UX behaviour) but the insistence on Chrome is just arbitrary lock-in. I won't be dying on that hill either, but it does suck.
- techsupporter 7y ago
  > The insistence on using Chrome is arbitrary and I don't like it. Supposedly this limitation is because Firefox doesn't implement the JavaScript calls that permit a U2F-calling site to know the type of U2F key being used and Google wants to enforce, when enrolling for ATP, that at least one of the two keys being enrolled can be used wirelessly (Bluetooth or NFC). I don't agree with it either but will only truly be mad if/when Mozilla implements the requisite call and Google still blocks enrollment without Chrome.
- everybodyknows 7y ago
  You'd think Ubuntu chromium-browser might be acceptable for Google U2F setup -- but no, not when I tried a couple of months ago.
  - taeric 7y ago
    Worked for me. :( What error did you see?
- taeric 7y ago
  Ha! That was an amusing mix of phrases. You got what I meant though, and provided some color. Agreed on it sucking.