gnyman's avatargnyman's Twitter Archive—№ 911

        1. This is very nice! Since Safari 13+ now supports WebAuthN you can use your Secure Enclave as Token with SoftU2F, even for Google.com but you need to add the key using Brave/Firefox (not nice), after that you can authenticate with it in Safari 1/4
          oh my god twitter doesn’t include alt text from images in their API
      1. …in reply to @gnyman
        If you want to use the Secure Enclave/SEP instead of the KeyChain you need to tell it to with /Applications/SoftU2F.app/Contents/MacOS/SoftU2F --enable-sep before adding the key. SoftU2F is made by @github github.com/github/SoftU2F 2/4
    1. …in reply to @gnyman
      The main difference is that if you use the SEP you need to TouchID each time, with Keychain you click "Approve" in the notification. And I don't think there is a way to back-up the SEP so if you loose or break your laptop your AuthN/U2F key will be lost, so have a backup 3/4
      oh my god twitter doesn’t include alt text from images in their API
  1. …in reply to @gnyman
    @Google @laparisa is there a technical reason why Google does not allow adding a webauthn/u2f key using Safari13 (or Firefox)? If I modify the UA it won't block me but will still fail. After it's been added I can authenticate using webauthn/u2f just fine in Safari
    oh my god twitter doesn’t include alt text from images in their API
    1. …in reply to @gnyman
      Small correction, it seems you cannot use Firefox to add the key. Only Chrome or Brave and maybe some other Chrome derivative. Still it’s nice that we are finally getting there with regards to alternatives or complements for passwords, Apple/Safari was the holdout.