Hacker News Reader

Comment by EwanToo | Hacker News Reader

Yubico do a short (but I think that's realistic) list of sites that specifically support u2f

https://www.yubico.com/solutions/#FIDO-U2F

Thanks I have a Yubico key and use it with Gmail on Chrome, to better phrase my question: How do I use it with FF? (my main browser).

On Firefox Nightly, it works without extensions, but you have to set security.webauth.u2f to true in about:config.

It only worked with some sites that I tried, for others you probably have to fake the user agent.

Yeah... The Google Cloud Console and Google Accounts do that for one. I can't set up or use my U2F key in anything but Chrome. Hangouts similarly barfs when you're using Firefox because they believe the WebRTC support is missing (instead of checking). Works fine with GitHub though :).

lastpass supports yubikeys as 2fa, but you have to have a subscription to premium for it to be enforced. i let mine lapse for a while and it simply stopped making me use my yubikey. i'm not really sure what was going on behind the scenes but it made me a little less confident in the particular aspect of lastpass.

That was the last drop. I switched to an alternative immediately as soon as I've noticed LastPass requesting premium for something as essential as a 2FA method.

There's an extension: https://addons.mozilla.org/en-GB/firefox/addon/u2f-support-a...

Works perfectly for me.

This extension will become deprecated with Firefox 57 (WebExtensions update).

Unfortunately, it seems that they've failed with shipping U2F support in Firefox at the time, so the browser support seems to be coming to 58 (currently in Nightly). So, your options in November will be either Firefox ESR or switching to Firefox Beta.

EDIT: Source: https://github.com/prefiks/u2f4moz/issues/59#issuecomment-32...

EDIT2: My previous coworker also discovered some high-CPU issues with that add-on on Ubuntu, so be aware of that as well: https://github.com/prefiks/u2f4moz/issues/51

Reply on news.ycombinator.com