search

GrapheneOS / os-issue-tracker

Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
https://grapheneos.org/
354 stars 20 forks source link

Fundamental U2F webauth method needed (browser function) #2613

Closed GrapheneDating closed 12 months ago

GrapheneDating commented 12 months ago

Although some apps/clients (i.e. Tutanota Mail) can utilize U2F Security Keys (i.e. Yubikey) when all 3 Google Play+Services+Framework are enabled, the more universal approach of a supportive browser (like the recommended but deprecated "U2F Browser" from de.cotech) would accomplish more. The Proton Mail app does not currently support security key U2F like the Tutanota app. Perhaps code from Brave Browser that supports security keys well could be used to provide Vanadium with this functionality. IMG_20231026_192738

thestinger commented 12 months ago

There's already an issue filed in the Vanadium tracker for FIDO2 without Play services. This would ideally be done as a library usable by any apps and doesn't need to be GrapheneOS specific. Ideally AOSP would have it in a mainline module. It's very unfortunate that it was implemented in Play services before there were mainline modules.

thestinger commented 12 months ago

See https://github.com/GrapheneOS/Vanadium/issues/61.