Re: Fido U2F, two-factor authentication support

2015-12-02 Thread Frederic Martin
Le lundi 9 novembre 2015 18:29:20 UTC+1, Michael Schwartz (m...@gluu.org) a écrit : > Hi guys... if you need a FIDO U2F server to test against, the Gluu Server has > endpoints built in. Its really easy to deploy on Ubuntu / Centos: > http://www.gluu.org/docs/admin-guide/deployment/ > > Also, I

Re: Fido U2F, two-factor authentication support

2015-11-28 Thread smaug
On 11/28/2015 11:36 AM, Anne van Kesteren wrote: On Sat, Nov 28, 2015 at 9:09 AM, Ian Young wrote: Maybe a Mozillian could drop in and give us an explanation of how the W3C process influences what gets implemented and when? Well, it doesn't really, many things are standardized by the W3C that

Re: Fido U2F, two-factor authentication support

2015-11-28 Thread smaug
On 11/28/2015 11:36 AM, Anne van Kesteren wrote: On Sat, Nov 28, 2015 at 9:09 AM, Ian Young wrote: Maybe a Mozillian could drop in and give us an explanation of how the W3C process influences what gets implemented and when? Well, it doesn't really, many things are standardized by the W3C that

Re: Fido U2F, two-factor authentication support

2015-11-28 Thread Anne van Kesteren
On Sat, Nov 28, 2015 at 9:09 AM, Ian Young wrote: > Maybe a > Mozillian could drop in and give us an explanation of how the W3C > process influences what gets implemented and when? Well, it doesn't really, many things are standardized by the W3C that are a poor fit for browsers. What gets impleme

Re: Fido U2F, two-factor authentication support

2015-11-28 Thread Ian Young
FIDO has now submitted the U2F Web API to the W3C[1]. I know this only makes it a *proposed* standard, but I would hope having it on this track would be enough to bump it up a bit in Mozilla's priorities. Maybe a Mozillian could drop in and give us an explanation of how the W3C process influences w

Re: Fido U2F, two-factor authentication support

2015-11-20 Thread Gervase Markham
On 18/11/15 19:26, phow...@ccvschools.com wrote: > This is definitely an important feature, but I'm not holding my > breath. I have had a lot of experience with Mozilla over the years > and I really doubt anything will materialize in the near future. Feeling particularly entitled today, are we?

Re: Fido U2F, two-factor authentication support

2015-11-18 Thread phowell
On Thursday, November 5, 2015 at 1:18:44 AM UTC-7, Jeroen Hoek wrote: > In December 2014 the first public release of the Fido alliance's > Universal 2nd Factor (U2F) specification was published. The idea behind > this open specification is to provide a secure two-factor authentication > method with

Re: Fido U2F, two-factor authentication support

2015-11-09 Thread Michael Schwartz (m...@gluu.org)
Hi guys... if you need a FIDO U2F server to test against, the Gluu Server has endpoints built in. Its really easy to deploy on Ubuntu / Centos: http://www.gluu.org/docs/admin-guide/deployment/ Also, I recorded a geeky video on how to test FIDO U2F: http://gluu.co/fido-u2f Basically, check enabl

Re: Fido U2F, two-factor authentication support

2015-11-05 Thread Frederik Braun
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 There is an experimental add-on being worked on that tries bring U2F support to Firefox. The source code is at , but it has not yet gone through the Add-on review process. Btw, the most important thing about the

Re: Fido U2F, two-factor authentication support

2015-11-05 Thread Joseph Lorenzo Hall
+1 I would love love love to have U2F in Firefox. (Also, Dropbox supports it too, just as a data point: http://blogs.dropbox.com/dropbox/2015/08/u2f-security-keys/ ) On Thu, Nov 5, 2015 at 5:18 PM, Jeroen Hoek wrote: > In December 2014 the first public release of the Fido alliance's > Universal

Fido U2F, two-factor authentication support

2015-11-05 Thread Jeroen Hoek
In December 2014 the first public release of the Fido alliance's Universal 2nd Factor (U2F) specification was published. The idea behind this open specification is to provide a secure two-factor authentication method with affordable hardware keys and a friendly UX. If I buy a hardware key that imp