Open Silesia82 opened 4 years ago
Any help from web security experts will be appreciated.
Hi all
Yeah +1. Please please, some developer who knows how to implement FIDO/Webauthn could take time. As for my knowledge the libaries are present in almost all browsers today. So RTL only has to address them. I will likely help to test, but can not assis further as I am not a dev.
Loggin in via Password is risky because of Keyloggers. 2FA is a good solution but not perfect. A more secure way is to use a device like this: https://solokeys.com/ It uses a Standard by FIDO Alliance and W3C https://fidoalliance.org/fido2/ A demo is available here: https://webauthn.io/ There is also a google Release on github: https://github.com/google/OpenSK Maybe it is possible to integrate it somehow in RTL?