Support FIDO U2F over USB and NFC. #389

New Issue

GiteaMirror · 2025-11-02T03:21:14-06:00

GiteaMirror commented

2025-11-02 03:21:14 -06:00

Originally created by @crocket on GitHub (Feb 23, 2017).

Why you want U2F

It authenticates a user via public key authentication between server and client. Stronger encryption than OTP.
Public key authentication prevents phishing and man-in-the-middle attacks.
There is no keyboard input, so it is not susceptible to keyboard loggers.
A U2F device can generate a new key pair for each (web) application. Automatic generation of application-specific keys prevents websites from tracking you by the same public key.

Desktop (U2F over USB)

Already implemented on chrome and opera.
Available as an addon in firefox. U2F will probably be natively supported in firefox soon.
According to https://developer.microsoft.com/en-us/microsoft-edge/platform/status/fido20webapis/, Microsoft hasn't started working on U2F, yet.

Mobile

U2F over NFC is currently supported via google authenticator on android.
However, U2F over USB is still possible if you connect a U2F key device to a smartphone via a USB cable.

Supported Web Services

Google
Facebook
Github
GitLab
Etc
- http://www.dongleauth.info/
- https://twofactorauth.org/

Originally created by @crocket on GitHub (Feb 23, 2017). ## Why you want U2F * It authenticates a user via public key authentication between server and client. Stronger encryption than OTP. * Public key authentication prevents phishing and man-in-the-middle attacks. * There is no keyboard input, so it is not susceptible to keyboard loggers. * A U2F device **_can_** generate a new key pair for each (web) application. Automatic generation of application-specific keys prevents websites from tracking you by the same public key. ## Desktop (U2F over USB) * Already implemented on chrome and opera. * Available as an addon in firefox. U2F will probably be natively supported in firefox soon. * According to https://developer.microsoft.com/en-us/microsoft-edge/platform/status/fido20webapis/, Microsoft hasn't started working on U2F, yet. ## Mobile U2F over NFC is currently supported via google authenticator on android. However, U2F over USB is still possible if you connect a U2F key device to a smartphone via a USB cable. ## Supported Web Services * Google * Facebook * Github * GitLab * Etc * http://www.dongleauth.info/ * https://twofactorauth.org/

GiteaMirror added the type/feature label 2025-11-02 03:21:14 -06:00

GiteaMirror closed this issue

2025-11-02 03:21:14 -06:00

GiteaMirror commented

2025-11-02 03:21:15 -06:00

@genofire commented on GitHub (Feb 28, 2018):

Works on Firefox native (without addon) since Quantum (v57)
(should be default enabled in next release v60 - before over about:config)

Would be nice ;)

@genofire commented on GitHub (Feb 28, 2018): Works on Firefox native (without addon) since Quantum (v57) (should be default enabled in next release v60 - before [over about:config](https://www.yubico.com/2017/11/how-to-navigate-fido-u2f-in-firefox-quantum/)) Would be nice ;)

GiteaMirror commented

2025-11-02 03:21:15 -06:00

@jonasfranz commented on GitHub (May 17, 2018):

@ all people interested in FIDO U2F

I've created a PR (#3971) to implement this feature.
I need more feedback regarding support under different operating systems and U2F devices. So if you own a FIDO U2F certified security key, please test if our implementation work for your setup.

Test instance: https://try.h.jonasfranz.software/

Please leave a comment under the PR (#3971) containing the name of your U2F device, OS and Browser (incl. version).

@jonasfranz commented on GitHub (May 17, 2018): @ all people interested in FIDO U2F I've created a PR (#3971) to implement this feature. I need more feedback regarding support under different operating systems and U2F devices. So if you own a FIDO U2F certified security key, please test if our implementation work for your setup. Test instance: https://try.h.jonasfranz.software/ Please leave a comment under the PR (#3971) containing the name of your U2F device, OS and Browser (incl. version).

GiteaMirror referenced this issue

2025-11-02 11:44:40 -06:00

[PR #389] [MERGED] Change default Android theme color meta tag #15353

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#389