It's enough to read the title. The rest of the article doesn't provide much else other than being one step closer. 😄
Whenever I read stuff like this, my mind goes a bit hazy. Because I'm just finding myself asking 'Why and when did the simple mechanic of passwords get this difficult?'
Maybe if password requirements weren't stingingly stupid, companies cared more about actual security and not an obstacle course they've gotta send people through to do one thing. We wouldn't ever know or need to know systems like this.
Meanwhile mobile Firefox doesn't even support YubiKey / FIDO2 for some godforsaken reason.
~~This is straight-up wrong.~~I use FIDO2 and Yubico OTP auth in Firefox desktop on a weekly basis.
~~Are you sure you're not using a hardened fork or tinkered with your about:config?~~
The main thing that Firefox frustratingly does not support is PRF, which is needed for encrypting data with FIDO-compatible devices, but they are working on that.
Edit: OP said mobile Firefox and I missed that. Added clarification.
Ah. If we're talking mobile, all bets are off. FIDO prompts require Apple and Google to provide the necessary APIs for third-party devs to use, and are still somewhat new. It's likely that since iOS browsers are still just re-skinned WebKit (until the EU stuff settles and Mozilla implements Gecko on iOS), FF on iOS can leverage the OS APIs, but making it work with Gecko on Android requires more work.
I was referring to desktop, where those limitations aren't a hindrance.
Yep, I had said
mobile Firefox
Just saying it's sad that FF mobile on Android is basically the only time it doesn't work.
This is a most excellent place for technology news and articles.
