5 ms·

Is this only implemented in Apple devices Or is it cross platform ?

by varbhat 6y ago

hprotagonist 6y ago
as far as i know both faceID and touchID require Secure Enclave, so that would be apple only.
- pbreit 6y ago
  I think Mac Chrome can support Touch ID: https://www.iphoneincanada.ca/news/google-chrome-for-mac-fingerprint-support-2/ https://www.iphoneincanada.ca/news/google-chrome-for-mac-fin...
  - filoleg 6y ago
    Yep, it can. I don't know what logic it uses to request touchID vs. keychain password (because i occasionally see both), but, nonetheless, I definitely had Chrome TouchID pop-up quite a few times when I tried to autofill my credit card info.
Nullabillity 6y ago
Looks like it's "just" another authn method for using the phone itself (or more precisely, the "secure element") as a WebAuthn/FIDO2 dongle. So the specific UX is Apple-specific (although it could of course be replicated by others), but the API is generic (and already exists).
eldridgea 6y ago
This appears to be Apple's implementation of WebAuthn which is a standard specification. So while this page is about the specifics of this in Safari, the WebAuthn spec in general is widely implemented. If your device has a TPM/secure enclave/etc (most modern devices do) then it works already in Chrome/FF/Safari/Edge on desktop and Chrome on Android and Safari on iOS. If you want to see it in action you can try out a demo at https://webauthn.io https://webauthn.io
blinkingled 6y ago
They are actually implementing the Credential Management API which is a W3C working draft - the underlying implementation on Safari/WebKit will allow using FaceID / TouchID as the Authenticator. Chrome 67+ and Firefox have already had WebAuthn support since some time - https://developers.google.com/web/updates/2018/05/webauthn https://developers.google.com/web/updates/2018/05/webauthn, https://itnext.io/biometrics-fingerprint-auth-in-your-web-apps-d5599522d0b3 https://itnext.io/biometrics-fingerprint-auth-in-your-web-ap... - and they use fingerprint, windows hello, USB/NFC keys as the platform allows - see for e.g. https://www.xda-developers.com/google-chrome-supports-windows-hello-payment-authentication/ https://www.xda-developers.com/google-chrome-supports-window...

Is this only implemented in Apple devices Or is it cross platform ?

hprotagonist 6y ago

as far as i know both faceID and touchID require Secure Enclave, so that would be apple only.

pbreit 6y ago
I think Mac Chrome can support Touch ID: https://www.iphoneincanada.ca/news/google-chrome-for-mac-fingerprint-support-2/ https://www.iphoneincanada.ca/news/google-chrome-for-mac-fin...
- filoleg 6y ago
  Yep, it can. I don't know what logic it uses to request touchID vs. keychain password (because i occasionally see both), but, nonetheless, I definitely had Chrome TouchID pop-up quite a few times when I tried to autofill my credit card info.

Nullabillity 6y ago

Looks like it's "just" another authn method for using the phone itself (or more precisely, the "secure element") as a WebAuthn/FIDO2 dongle. So the specific UX is Apple-specific (although it could of course be replicated by others), but the API is generic (and already exists).

eldridgea 6y ago

This appears to be Apple's implementation of WebAuthn which is a standard specification. So while this page is about the specifics of this in Safari, the WebAuthn spec in general is widely implemented. If your device has a TPM/secure enclave/etc (most modern devices do) then it works already in Chrome/FF/Safari/Edge on desktop and Chrome on Android and Safari on iOS. If you want to see it in action you can try out a demo at https://webauthn.io https://webauthn.io

blinkingled 6y ago

They are actually implementing the Credential Management API which is a W3C working draft - the underlying implementation on Safari/WebKit will allow using FaceID / TouchID as the Authenticator. Chrome 67+ and Firefox have already had WebAuthn support since some time - https://developers.google.com/web/updates/2018/05/webauthn https://developers.google.com/web/updates/2018/05/webauthn, https://itnext.io/biometrics-fingerprint-auth-in-your-web-apps-d5599522d0b3 https://itnext.io/biometrics-fingerprint-auth-in-your-web-ap... - and they use fingerprint, windows hello, USB/NFC keys as the platform allows - see for e.g. https://www.xda-developers.com/google-chrome-supports-windows-hello-payment-authentication/ https://www.xda-developers.com/google-chrome-supports-window...