3 ms·
What if browsers exposed the capabilities to locate the inputs, act upon user input, supply generated passwords, etc. in a sandboxed manner?
by cordite 5y ago
What if browsers exposed the capabilities to locate the inputs, act upon user input, supply generated passwords, etc. in a sandboxed manner?
- oefrha 5y agoThat’s how iOS Safari’s Password AutoFill works for both iCloud Keychain and third party password managers. Password managers can also supply a prebuilt list so that Safari handles everything, although custom widget handling user input is also allowed. https://developer.apple.com/documentation/security/password_autofill https://developer.apple.com/documentation/security/password_... Edit: Of course it’s not limited to Safari, it works for in-app authentication flows too provided apps integrate it.
- peteretep 5y agoOr, even better, no passwords and just sensible pki
- shawnz 5y agoA browser-integrated password management API could make for a smoother transition to a future automated auth technology based on public keys, like WebAuthn