search

keepassium / KeePassium

KeePass-compatible password manager for iOS
https://keepassium.com
Other
1.2k stars 104 forks source link

WebAuthn #146

Closed mkwiecinski closed 3 years ago

mkwiecinski commented 3 years ago

First of all - KeePassium is a really convenient product, keep up the good job!

Describe a feature you'd like Support for WebAuthn.

Additional context Some reference regarding WebAuthn and Yubikey: https://developers.yubico.com/Mobile/iOS/WebAuthn_iOS_Demo_Walkthrough.html

keepassium commented 3 years ago

First of all - KeePassium is a really convenient product, keep up the good job!

Thank you!

Support for WebAuthn.

I'm afraid I need some more detail here... Do you mean using WebAuthn for database protection? But how is this different from the existing challenge-response scheme?

mkwiecinski commented 3 years ago

Well, not really DB.

There are at least two ways: use WebAuthn locally (also CTAP is an acronym that corresponds to this scenario, see https://github.com/w3c/webauthn/issues/954)

But from UX perspective, I was wondering if it can be used more in a manner that Google Prompt works. But I am not sure that in Google Prompt WebAuthn is actually used behind the curtain.

keepassium commented 3 years ago

(Sorry for the delay.)

Having only a vague idea about WebAuthn, I took some time to read about CTAP. If I understand correctly, you want KeePassium to become a roaming authenticator. Unfortunately, there are several obstacles:

mkwiecinski commented 3 years ago

Thanks for digging deeper and providing product perspective. This was just an idea, I can agree that it would be hard and not significantly impactful for your users. I think you should monitor this from time to time though! :)

keepassium commented 3 years ago

Thank you for understanding :) In the meanwhile, I'll close this issue.