<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - implement FIDO U2F support..."
href="https://bugs.webkit.org/show_bug.cgi?id=143491#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - implement FIDO U2F support..."
href="https://bugs.webkit.org/show_bug.cgi?id=143491">bug 143491</a>
from <span class="vcard"><a class="email" href="mailto:alice@gothcandy.com" title="Alice Bevan-McGregor <alice@gothcandy.com>"> <span class="fn">Alice Bevan-McGregor</span></a>
</span></b>
<pre>Created <span class=""><a href="attachment.cgi?id=279408" name="attach_279408" title="U2F request flow diagram.">attachment 279408</a> <a href="attachment.cgi?id=279408&action=edit" title="U2F request flow diagram.">[details]</a></span>
U2F request flow diagram.
U2F is beginning to see more wide-spread deployment, with Github being one notable example site that utilizes it. Currently, Chrome integrates support, but lower-level integration in WebKit would broadly increase the potential user base.
There exists a cross-platform (Windows, Linux, Mac OS X) C reference implementation, <a href="https://developers.yubico.com/libu2f-host/">https://developers.yubico.com/libu2f-host/</a>, supported by a manufacturer (Yubico) of U2F-compliant tokens. They also provide a test server for interactive experimentation (<a href="https://demo.yubico.com/u2f">https://demo.yubico.com/u2f</a>), reference server integration implementation, and cURL-able test endpoints.
This client (device host) reference implementation depends on: pkg-config, JSON-C, and HIDAPI for USB communication.
I very strongly desire U2F support both for my own site use, as well as for token-secured access to Github.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>