Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Face ID and Touch ID for the Web

webkit.org

Post reply on HN
Print view View original

11–20 of 371 posts

Re: Face ID and Touch ID for the Web

#11

Post by pbreit »

hprotagonist wrote: post #4
varbhat wrote: post #3

Is this only implemented in Apple devices Or is it cross platform ?

as far as i know both faceID and touchID require Secure Enclave, so that would be apple only.

I think Mac Chrome can support Touch ID: https://www.iphoneincanada.ca/news/google-chrome-for-mac-fin...

Re: Face ID and Touch ID for the Web

#12

Post by eldridgea »

varbhat wrote: post #3

Is this only implemented in Apple devices Or is it cross platform ?

This appears to be Apple's implementation of WebAuthn which is a standard specification. So while this page is about the specifics of this in Safari, the WebAuthn spec in general is widely implemented. If your device has a TPM/secure enclave/etc (most modern devices do) then it works already in Chrome/FF/Safari/Edge on desktop and Chrome on Android and Safari on iOS.

If you want to see it in action you can try out a demo at https://webauthn.io

Re: Face ID and Touch ID for the Web

#13

Post by blintz »

So happy Apple decided to go with an open standard here rather than something proprietary. This is good news for the FIDO2 ecosystem and I hope this leads to far greater support for FIDO2 authenticators of all types.

There is another world in which Apple just pushed 'Sign in with Apple' and created yet another federated identity provider rather than true, 'secure element'-based FIDO2 authentication.

Re: Face ID and Touch ID for the Web

#14

Post by blinkingled »

varbhat wrote: post #3

Is this only implemented in Apple devices Or is it cross platform ?

They are actually implementing the Credential Management API which is a W3C working draft - the underlying implementation on Safari/WebKit will allow using FaceID / TouchID as the Authenticator. Chrome 67+ and Firefox have already had WebAuthn support since some time - https://developers.google.com/web/updates/2018/05/webauthn, https://itnext.io/biometrics-fingerprint-auth-in-your-web-ap... - and they use fingerprint, windows hello, USB/NFC keys as the platform allows - see for e.g. https://www.xda-developers.com/google-chrome-supports-window...

Re: Face ID and Touch ID for the Web

#15

Post by filoleg »

pbreit wrote: post #11
hprotagonist wrote: post #4

Earlier quoted context omitted.

as far as i know both faceID and touchID require Secure Enclave, so that would be apple only.

I think Mac Chrome can support Touch ID: https://www.iphoneincanada.ca/news/google-chrome-for-mac-fin...

Yep, it can. I don't know what logic it uses to request touchID vs. keychain password (because i occasionally see both), but, nonetheless, I definitely had Chrome TouchID pop-up quite a few times when I tried to autofill my credit card info.

Re: Face ID and Touch ID for the Web

#17

Post by rektide »

obilgic wrote: post #2

What will Chrome do?

> What will Chrome do?

Develop & give away a verifiable, open-source hardware & software solution for a silicon root of trust, with a focus on security through transparency[1]. Google will organize & make available the world's information on how to secure systems well.

Yes, this is intended for, among other uses, implementation of a FIDO2 universal 2-factor security key[2].

[1] https://opentitan.org/

[2] https://github.com/lowRISC/opentitan/pull/1125/files#diff-6d...

Re: Face ID and Touch ID for the Web

#18

Post by timdorr »

obilgic wrote: post #2

What will Chrome do?

This is a part of the Credentials Management API / WebAuthn API: https://developer.mozilla.org/en-US/docs/Web/API/Web_Authent...

They already support this for things like FIDO hardware keys and other biometric hardware. It's also supported by Firefox.

Post reply on HN