3 ms·
Some can do that in their own app, e.g. Steam Guard. Too bad that's not a standard. But the FIDO2/webauthn stuff may be similar.
by LinAGKar 3y ago
Some can do that in their own app, e.g. Steam Guard. Too bad that's not a standard. But the FIDO2/webauthn stuff may be similar.
- panick21_ 3y agoI don't want that to be the standard. I don't want 20 different apps for each bank and each provider.
- LinAGKar 3y agoNo, but a standard so that any app could implement that functionality and have it work with any service that supports it
- bonki 3y agoSteam uses "standard" TOTP but displays the code in a non-standard format. You used to be able to extract the secret and use e.g. KeePass to provide the code in the Steam Guard format.
- gsich 3y agoYou still can.
- lxgr 3y agoYou raise a good point: It seems like this should be possible to integrate into WebAuthN somehow, but currently it isn't. Passkeys could be coupled with Web Push somehow, for a "confirm action x" type of experience pushed to your (networked) authenticator even when you're not at the website of the relying party that owns it.
- oefrha 3y agoIf you do that in your own app, you might as well just show a QR code which the user scans and opens up the app for approval. Code as backup. Having to type in an alphanumeric code (talking about Steam Guard, not standard TOTP) when the app is already involved is quite outdated. I believe Steam Guard already added the scan QR code flow a while ago?