Re: W3C Proposed Recommendation: Web Authentication

2019-02-11 Thread Chris Mills
As a side note, I will soon start work on updating the Cred Man[0] and Web Authn[1] docs on MDN, to tidy them up and make sure they are high quality. Adam Powers originally did a huge amount of work contributing these docs (thanks Adam!), but we really ought to give them a good review. I may

Re: W3C Proposed Recommendation: Web Authentication

2019-02-08 Thread Joseph Lorenzo Hall
+1 and thank you for all the hard work on the spec and landing so much in FF, JCJ!!! On Fri, Feb 8, 2019 at 4:09 PM J.C. Jones wrote: > Out of all multi-factor authentication solutions I know of, Web > Authentication is our best technical response to the scourge of phishing. > Tying public-key

Re: W3C Proposed Recommendation: Web Authentication

2019-02-08 Thread J.C. Jones
Out of all multi-factor authentication solutions I know of, Web Authentication is our best technical response to the scourge of phishing. Tying public-key cryptography into web logins, it dramatically raises the bar for phishing: From a simple confusable website and replay attack, to an HTTPS

W3C Proposed Recommendation: Web Authentication

2019-01-31 Thread L. David Baron
A W3C Proposed Recommendation is available for the membership of W3C (including Mozilla) to vote on, before it proceeds to the final stage of being a W3C Recomendation: Web Authentication https://www.w3.org/TR/webauthn/ Deadline for responses: Thursday, February 14, 2019 If there are