Why doesn't Safari support FIDO U2F for 2 Factor Authentication?

Question

Level 1

19 points

Why doesn't Safari support FIDO U2F for 2 Factor Authentication?

I have been using a security key for 2 factor authentication and I haven't been able to find a way to get it to work with Safari. I know there are other options available but when traveling I can't always get a text or use my authenticator app so the key is mega useful. I don't understand why apple wouldn't incorporate this security tech into their browser. Is there a plugin? Couldn't find anything on google. Thanks.

MacBook Pro, Mac OS X (10.7.2), 2.26Ghz Core2 Duo, 4GB DDR3,

Posted on Nov 30, 2017 9:51 AM

Reply

Answer 1

Dec 1, 2017 9:06 PM in response to Jalad

I found this project, which works on some sites. It's a Safari extension, which you'll have to build and self-sign.

https://github.com/Safari-FIDO-U2F/Safari-FIDO-U2F

You need to be a developer to build it yourself, and also be able to be an local admin user to use the command line in order to get it working, as requires some libraries installed using Homebrew.

Reply

Answer 2

Dec 4, 2017 1:17 PM in response to Erick808a

Let me know if you need some help, it was a little difficult to get the settings correct in order for the build to complete successfully.

Also, note that "you need to be a developer" doesn't require paying the $99 Apple Developer Connection fee, as you can run it on your own computers using your own build, for free.

Reply

Answer 3

Dec 4, 2017 1:54 PM in response to Erick808a

I just came across this iOS Safari extension app that implements U2F on the iOS Secure Enclave chip! Take a look (still need to compile your own using XCode):

GitHub - mastahyeti/security-key: iOS SEP U2F

Reply