Hacker News Reader

You don't really[1] need to install this, if you're using Firefox. Just set the prefs 'security.webauth.u2f' and 'security.webauth.u2f_enable_softtoken' to true.

[1] (Unless you need the token to live in your Mac OS keychain, instead of the Firefox profile directory.)

View on HN

My understanding is that the FF softtoken was intended to be temporary while they worked on their HID support. That might not be the case any longer though.

Yeah, the software token was only intended for testing purposes.[1] HID support is supposedly a goal for later this year.[2] There is also a third-party(?) add-on for hardware token support[3], but apparently it will stop working with FF 57 as it not was not written for WebExtensions.

(Disclaimer: not affiliated with Mozilla; I just check in on bug 1065729 every so often.)

[1]: https://bugzilla.mozilla.org/show_bug.cgi?id=1065729#c262

[2]: https://wiki.mozilla.org/Security/CryptoEngineering#Web_Auth...

[3]: https://addons.mozilla.org/en-US/firefox/addon/u2f-support-a...

Does this actually work for you? I could never get that to work. (Firefox 54 on Windows)

Reply on news.ycombinator.com