Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> What's required for Security Keys for Apple ID

> A modern web browser. If you can't use your security key to sign in on the web, update your browser to the latest version or try another browser.

It doesn't seem like Firefox 108 supports this. Does anyone know if Firefox beta or nightly work to sign into iCloud with hardware security keys for 2FA?

---

Just confirmed that Firefox beta (109) doesn't support iCloud's sign in, either.



Firefox on macOS unfortunately has very poor WebAuthN support, in my experience.

It only supports legacy U2F keys/mode, as far as I know, and Apple seems to require CTAP2.


Firefox team simply has been refusing to implement the Webauthn spec for years now. It's extremely frustrating and is probably still years away as nobody seems to be actively working on it in any capacity.


That's odd, because I can sign into (on-prem) Confluence with my Yubikey (5 NFC) as the MFA via Firefox. I get a little Windows "tap your key" prompt and everything.


Firefox supports U2F. Webauthn is backwards-compatible with U2F. However as a website you can choose whether you want to actually support U2F or only FIDO2. Maybe Apple opted to not do it.

However when I look at the JS code in appleid.apple.com there does seem to be code for U2F code surprisingly.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: