firefox 57 +

[NodokaMurmevent]

Hello, did you have any plan for your addon working with webextension ? with firefox 57 your addon will stop to work.

[prefiks]

There is big chance that firefox will have native support for u2f soon, so i don't want to spend much time in rewriting that extension.

[Essjayess]

This addon also broke in Firefox Developer Edition 56.0b2.

[yfdyh000]

https://bugzilla.mozilla.org/show_bug.cgi?id=1065729

[bunnybooboo]

There are several sweating pretty hard on this rn:
https://bugzilla.mozilla.org/show_bug.cgi?id=1380270 (P2)
https://bugzilla.mozilla.org/show_bug.cgi?id=1388843 (P1)
https://bugzilla.mozilla.org/show_bug.cgi?id=1388851 (P1)

[NodokaMurmevent]

on nightly 57 we can find u2f paramerters typing on adress bar :

about:config

and seach for u2f you can enable the U2F login but it's broken when i wrote this.

[bunnybooboo]

it's also in 55 @NodokaMurmevent

Check this tool https://u2f.bin.coffee/

[prefiks]

So i did preliminary conversion to webextension (it's here: https://github.com/prefiks/u2f4moz/tree/webextension/webextension), but to make it work it will require installing external program (this is only method that would allow to communicate with physical device). It is not 100% conversion yet, it can't handle cases where it need to fetch external facets, but that theoretically could be added (i am missing access to https://developer.mozilla.org/en-US/Add-ons/SDK/High-Level_APIs/url#getTLD(url) to make it work).

[jcjones]

Hi, all - I'm one of the folks building U2F support natively into Firefox. It looks like it won't make it in for 57, I'm afraid, but we'll almost certainly make it into Firefox 58.

If you're on Windows or OSX, I actually have some partially-working unstable builds available with U2F support. There's a problem using it on some sites - like Github - that I'm still tracking down. (EDIT: Found the bug, and added tests to u2f.bin.coffee, now just gotta fix it.)

This bug 1245527 will hook our U2F code up into our USB HID code, which is in a large set of patches that are further away from review. The actual hardware interaction code is this rust library, u2f-hid-rs which is landing in bug 1388843.

Unfortunately, getting this kind of hardware interaction into Gecko has required a lot more work than the way addons worked. :) But it does open up all the more advanced browser-interaction parts of web authentication.

[NodokaMurmevent]

thanks for the information, i will continue to use nightly for a little moment its seem.

[jcjones]

@prefiks: How common are external facets, by the way? Firefox Bug 1244959 is about adding support for them, but I don't know where they're used in the wild. Any pointers you can give me here or on there would be helpful!

[prefiks]

There is this: #55, but except that i never seen one in wild.

[NodokaMurmevent]

official integration work in firefox 58 i have juste enable in about:config, i login on my nextcloud without any problem

security.webauth.u2f        true
security.webauth.webauthn        true
security.webauth.webauthn_enable_softtoken        true
security.webauth.webauthn_enable_usbtoken        true

[jcjones]

Indeed, @NodokaMurmevent: Experimental support landed in Firefox 57 ("Firefox Quantum"), where this extension (unfortunately) stops working.

Tweet: https://twitter.com/jamespugjones/status/912314952232267777

There is no external FacetID support in the experimental code in Firefox, so this isn't a solution for Facebook and probably won't work for Google Accounts either, but it's intended as a stop-gap for W3C Web Authentication

I suppose it might be good to point people to how to flip on the internal support though maybe in the u2f4moz README?

[offlinehoster]

FireFox57 is now available and U2F is not working. Any Updates for the awesome u2f4moz project? ;)

[offlinehoster]

Sorry for the noise!

U2F is working after you activated this option inside FireFox. For me is the following setting working "security.webauth.u2f true"