5 ms·
When I asked in IRC, I was told U2F was not implemented in browsers on OpenBSD because, "do you really want browsers to have full access to your USB stack?"
by oil25 7y ago
When I asked in IRC, I was told U2F was not implemented in browsers on OpenBSD because, "do you really want browsers to have full access to your USB stack?"
- beefhash 7y agotbf, that IRC channel may not exactly be super canonical. https://cvsweb.openbsd.org/cgi-bin/cvsweb/www/index.html?rev=1.735&content-type=text/x-cvsweb-markup https://cvsweb.openbsd.org/cgi-bin/cvsweb/www/index.html?rev... "remove freenode channel from index, it lacks any form of sensible moderation."
- floatboth 7y ago"full access to your USB stack" is not very meaningful (and honestly sounds like a WebUSB criticism, maybe someone thought U2F required WebUSB?!) You only have access to the devices which you have permission to access. On FreeBSD, we have a devd config that sets the u2f group on U2F tokens.