3 ms·

it still seems pretty bad ui wise, prompting me to scan a QR code on desktop: https://webauthn-conditional-ui-demo.glitch.me/create-account.html https://webauth

it still seems pretty bad ui wise, prompting me to scan a QR code on desktop: https://webauthn-conditional-ui-demo.glitch.me/create-account.html https://webauthn-conditional-ui-demo.glitch.me/create-accoun... I was ready to give up until I realized that maybe "internal sensor" means Windows Hello on my machine and yep it does. But no real user is going to click through these security sensitive popup dialogs until Windows Hello shows up as an option. My verdict is that it's still clearly only for techies. And when I cancel the dialog it prompts me to "setup my security key". Just terrible ui, nonstop popups. Edit: Firefox shows me the Windows Hello option immediately, that should be the default on desktop.

Buttons840 3y ago
My daughter recently had an unplanned "remote learning" day because of snow. One of my daughters assignments required her to log into an app. At school they do so by scanning a QR code they keep in the classroom. The teacher sent a picture of the QR code. I found myself in the hilariously absurd situation of needing my laptop to scan a QR code it was displaying on its own screen. I took a picture with my phone and then presented the QR back to the computer. Your comment reminded me of this.
- francislavoie 3y ago
  I use 1Password for TOTP. It has a screenshot option to scan the QR code during setup. It's handy.
iudqnolq 3y ago
On Firefox on my Android phone it's phrased much better: "Use this device with screen lock". But that doesn't sound like something I'd ever want. Obviously I want to be able to log in on my computer too?
- Nathanba 3y ago
  it seems I entirely missed the red text on Firefox that says "Your browser does not implement Conditional UI" so what Firefox did was to probably prompt for the old WebAuthn and I guess that's Windows Hello which makes a lot of sense to me. I wonder whether Firefix will also show me the QR code signin as the default on desktop once they implement it. Like you said...in my opinion this makes no sense, obviously as a desktop user using a desktop site I want to remain on my desktop hardware device. Or am I misunderstanding you and you want to log in on desktop with the same passkey that you generated on mobile? I think that is never supposed to work, it's supposed to be tied to the device.

Buttons840 3y ago

My daughter recently had an unplanned "remote learning" day because of snow. One of my daughters assignments required her to log into an app. At school they do so by scanning a QR code they keep in the classroom. The teacher sent a picture of the QR code. I found myself in the hilariously absurd situation of needing my laptop to scan a QR code it was displaying on its own screen. I took a picture with my phone and then presented the QR back to the computer. Your comment reminded me of this.

francislavoie 3y ago
I use 1Password for TOTP. It has a screenshot option to scan the QR code during setup. It's handy.

iudqnolq 3y ago

On Firefox on my Android phone it's phrased much better: "Use this device with screen lock". But that doesn't sound like something I'd ever want. Obviously I want to be able to log in on my computer too?

Nathanba 3y ago
it seems I entirely missed the red text on Firefox that says "Your browser does not implement Conditional UI" so what Firefox did was to probably prompt for the old WebAuthn and I guess that's Windows Hello which makes a lot of sense to me. I wonder whether Firefix will also show me the QR code signin as the default on desktop once they implement it. Like you said...in my opinion this makes no sense, obviously as a desktop user using a desktop site I want to remain on my desktop hardware device. Or am I misunderstanding you and you want to log in on desktop with the same passkey that you generated on mobile? I think that is never supposed to work, it's supposed to be tied to the device.