4 ms·
TL:DR: don't waste your time. There are literally security features not implemented since 2017. E.G: no proper support for webauthn (CTAP2) in firefox on macos
by rdslw 5y ago
TL:DR: don't waste your time. There are literally security features not implemented since 2017.
E.G: no proper support for webauthn (CTAP2) in firefox on macos (abysymal situation shown here: https://fidoalliance.org/fido2/fido2-web-authentication-webauthn/ https://fidoalliance.org/fido2/fido2-web-authentication-weba...) linux not much better. Safari, Chrome, even Edge have it, while firefox is stagnating since 2017 (bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=1530373 https://bugzilla.mozilla.org/show_bug.cgi?id=1530373 ) :-(
When I hear about features like Colorways being prioritized over things like proper webauthn support on important platform (4 years now) it makes me sad.
Would have helped personally, but moving parts of firefox to rust not even decimated the contributors margin, but probably reduced it 100x. and here we are with rs_webauthn lib lacking necessary fixes in security important area :(
p.s. I knot how my post sounds, but I'm frustrated with (some) mozilla decisions.