On Tuesday, March 26, 2019 at 12:50:21 PM UTC-7, Alex Gaynor wrote:
> Simply flipping the pref, and not including register support seems a bit
> unfortunate, as it'll leave some websites in a works-sometimes state. While
> some larger sites have UIs and help articles explaining that Firefox works
> for login but not reigstering a key, many will not. If it's possible to
> include register support in what rides the train, that seems preferable.
I'm sorry to be unclear. I'm intending to include the register support as well.
I have filed Bug 1539541 [0] to do this work:
Enable the security.webauth.u2f by default, to ride the trains
Remove the aOp == U2FOperation::Sign check from EvaluateAppID in
WebAuthnUtil.cpp, permitting the Google override to work for Register as well
as Sign.
Further discussion is still welcome, either here or on the bug.
[0] https://bugzilla.mozilla.org/show_bug.cgi?id=1539541
_______________________________________________
dev-platform mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-platform