3 ms·
Gitlab.com has used U2F/WebAuthn for years (not sure which, but they're both isolated by origin anyway).
by Nullabillity 6y ago
Gitlab.com has used U2F/WebAuthn for years (not sure which, but they're both isolated by origin anyway).
- usr1106 6y agoRight, according to https://en.m.wikipedia.org/wiki/Universal_2nd_Factor https://en.m.wikipedia.org/wiki/Universal_2nd_Factor it's U2F. So I would not be surprised if gitlab requires their employees to use the dongle instead of simple OTP which they allow for customers/users. A shortcoming of the article not to mention whether that's the case or not.
- emilycook 6y agoI work at gitlab and just stumbled across this, we use U2F but we have an MR to add WebAuthn support https://gitlab.com/gitlab-org/gitlab/-/merge_requests/26692 https://gitlab.com/gitlab-org/gitlab/-/merge_requests/26692