search

kryptco / kr-u2f

DEPRECATED A Browser extension that lets you use your phone as a U2F/WebAuthN Authenticator for strong, unphishable 2FA.
https://krypt.co
125 stars 36 forks source link

[macOS Safari 13 Extension] Registration on Google fails #45

Open jackdorland opened 4 years ago

jackdorland commented 4 years ago

Hello! It seems when trying to register my Krypton "security key" with Google, it just replies "Remove your security key and try again."

Any insight on what happened?

odd

agrinman commented 4 years ago

Confirmed this is an issue. Work around: register your key on chrome/firefox, and then it will work in safari for authentication.

Long term, Google doesn't allow u2f registration on safari -- they enforce webauthn only which may need adjustments on the krypton mobile app.

agrinman commented 4 years ago

Does anyone have a hardware u2f/fido2 key that can test registration on Google? I have a hunch that registration is broken of Safari for any security key...

jackdorland commented 4 years ago

I am planning to get one soon... however your workaround worked perfectly. I’ll check back in a while when I make the purchase to see if you still need help.

agrinman commented 4 years ago

I have many, just they are not with me currently :/

agrinman commented 4 years ago

Pretty sure this is a google thing, https://webauthndemo.appspot.com works fine for me (it's a demo built by google). Curious if the hardware token works...

lumaxis commented 4 years ago

@agrinman I just tested key registration with my Solo key in Safari and it worked just fine.

agrinman commented 4 years ago

@lumaxis you tested registration right?

lumaxis commented 4 years ago

Yes, sorry. Realized that my comment is a bit ambiguous just after posting. Edited it for clarity 🙂

agrinman commented 4 years ago

Ok thanks, that’s good then! Hopefully they’re not blocking because of something like attestation. Will debug further!

mkexc commented 4 years ago

Ok thanks, that’s good then! Hopefully they’re not blocking because of something like attestation. Will debug further!

Any updates on this? I have this bug too.

agrinman commented 4 years ago

Not yet...still an open issue as to why this is happening. In the mean time, I'd suggest registering your krypton key on the chrome browser. Authentication works just fine on Safari.