Open
Bug 1529973
Opened 6 years ago
Updated 1 year ago
Make the WebAuthn Soft Token a Real Thing (sync, FIDO2, platform DAR, UI)
Categories
(Core :: DOM: Web Authentication, enhancement, P5)
Tracking
()
NEW
People
(Reporter: jcj, Unassigned)
References
Details
Firefox has a U2F soft token implemented, mostly for testing, that also happens to work just fine for WebAuthn flows. The functional problem with turning it on is, without an UI, it always acts immediately, preempting any other WebAuthn/U2F authenticators available or attached. This bug would be a meta-bug to make the soft token a Real Thing by fixing the functional issue, and also improving the security and properties of it:
- The user should have to confirm use of the soft token
- The user should be able to, without changing a pref, use a different security key
- The soft token might sync its key material and its counter state via Sync
- The soft token might store its key material using the platform data-at-rest support (https://searchfox.org/mozilla-central/source/security/manager/ssl/OSKeyStore.h)
- The soft token might support FIDO2 attestation modes for WebAuthn, even if it cannot be accredited
Comment 2•6 years ago
|
||
irrelevant |
@jcj: You removed the blocking of bug #1315460 by closing bug #1481890 !
Reporter | ||
Updated•5 years ago
|
Priority: P4 → P5
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•