3 ms·
For cases like this, when people leave their key permanently attached to a device, it would be nice if the device itself had this functionality built in. I mean
by wereHamster 7y ago
For cases like this, when people leave their key permanently attached to a device, it would be nice if the device itself had this functionality built in. I mean, the iPhone already has a secure enclave to store this kind of sensitive data.
- gwd 7y agoYou mean like the MacBook Pro? https://support.apple.com/en-us/HT207054 https://support.apple.com/en-us/HT207054
- acdha 7y agoYes: this is apparently supported by https://github.com/github/SoftU2F https://github.com/github/SoftU2F — see https://github.com/github/SoftU2F/pull/29#issuecomment-324088826 https://github.com/github/SoftU2F/pull/29#issuecomment-32408... — but the documentation doesn't reflect that yet.
- Kipters 7y agoThat's what the TPM does. Windows Hello in conjunction with a TPM can be used for FIDO2 authentication in the current Windows 10 version.
- jeroenhd 7y agoThere is a web service using exactly such a mechanism for U2F in browsers: https://krypt.co/ https://krypt.co/ This works through an addon in the browser rather than native functionality but the system is secure enough that I use it as a backup for some of my 2FA services in case I lose my TOTP keys.