danstiner / rust-u2f

U2F security token emulator written in Rust

Apache License 2.0

288 stars 43 forks source link

[Feature] FIDO2 #50

Open ghost opened 5 years ago

ghost commented 5 years ago

FIDO2 SHOULD be implemented because U2F is a legacy protocol, as this page says.

39 related, but impossibility to implement something anytime soon is not a reason to close an issue.

danstiner commented 5 years ago

Becoming a legacy protocol does not make U2F any less secure, but I'm happy to keep this issue for tracking FIDO2 support. I don't have the time to write the code myself but I'd be open to contributions.

I closed that issue largely because the poster deleted their account.

KOLANICH commented 5 years ago

because the poster deleted their account

It doesn't look like deleted.

danstiner commented 5 years ago

On #39 I see

ghost opened this issue 11 days ago • an unknown user

Is that not what others see?

KOLANICH commented 5 years ago

Is that not what others see?

I see that issue a bit different, but anyway it seems he is really deleted. OK.

danstiner commented 5 years ago

No problem!

ghost commented 5 years ago

FIDO2 is implemented only in MS Edge (partially), other browsers will not work with supported keys.

ghost commented 5 years ago

"I am not currently planning to add new features like passwordless login the newer FIDO2 standard supports." from README. Close?

danstiner commented 5 years ago

Up to you if you want to close. I would be open to PRs for FIDO2 if done well, but I don't have time to pursue it at the moment.