On the market for an iPhone? Here's a breakdown of all the currently shipping iPhones from Apple.
Safari Supports NFC, USB, and Lightning FIDO2-Compliant Security Keys in iOS 13.3
The iOS 13.3 update that is currently available to developers and public beta testers has a new Safari feature that supports NFC, USB, and Lightning FIDO2-compliant security keys.
This option was activated in the first beta of iOS 13.3, but in the second developer beta, Apple has added details about it in the release notes.
Yubico announced the YubiKey 5Ci back in August, but at the time of launch, it was of limited usefulness because it did not work with Safari, Chrome, or other major browsers, though it was compatible with apps like 1Password.
With Safari support, the YubiKey 5Ci is a legitimately useful tool that can be more convenient than software-based two-factor authentication because there's no need to enter a security code -- you simply plug it in to an iPhone or Mac (there's also a USB-C connector) to authenticate. Support for FIDO2-compliant USB security keys using WebAuthn was previously added to Safari 13 in macOS.
Other NFC, USB, and Lightning-based security keys will also work with Safari following the iOS 13.3 update. There's no word yet on when iOS 13.3 will be released, but we may see it sometime in December after a few more weeks of beta testing.
This option was activated in the first beta of iOS 13.3, but in the second developer beta, Apple has added details about it in the release notes.
Now supports NFC, USB, and Lightning FIDO2-compliant security keys in Safari, SFSafariViewController, and ASWebAuthenticationSession using the WebAuthn standard, on devices with the necessary hardware capabilities.With the iOS 13.3 update, Safari will support physical security keys like the Lightning-equipped YubiKey, which can be used for more secure two-factor authentication.
Yubico announced the YubiKey 5Ci back in August, but at the time of launch, it was of limited usefulness because it did not work with Safari, Chrome, or other major browsers, though it was compatible with apps like 1Password.
With Safari support, the YubiKey 5Ci is a legitimately useful tool that can be more convenient than software-based two-factor authentication because there's no need to enter a security code -- you simply plug it in to an iPhone or Mac (there's also a USB-C connector) to authenticate. Support for FIDO2-compliant USB security keys using WebAuthn was previously added to Safari 13 in macOS.
Other NFC, USB, and Lightning-based security keys will also work with Safari following the iOS 13.3 update. There's no word yet on when iOS 13.3 will be released, but we may see it sometime in December after a few more weeks of beta testing.
[ 26 comments ]
Top Rated Comments
(View all)
10 weeks ago
This is great news for the 8 people who will ever use this totally obscure feature.
10 weeks ago
This is great news for the 8 people who will ever use this totally obscure feature.
Willing to bet you will eat these words by this time next year.
All our security standards are extremely weak and / or have been hacked so we need new ones desperately. 2FA is going to be the savior of doing anything wallet related on your computer.
The reason this is fantastic news is that it will allow mass adoption of way better, way more convenient, way more mass compatible security.
10 weeks ago
This is great news for the 8 people who will ever use this totally obscure feature.
And notice how devoid of the usual comments ("about time!", "what could go wrong", "how about you fix your software, Tim.", "X dollars? that's insane!", "insert dad joke here") this thread is. People are more likely to complain about what they don't quite fully understand but not about what they know nothing about IMHO.
9 weeks ago
FIDO is that wonky thing where where the site is what is actually storying your keypair, but with you having locally encrypted it so it can give it to you so you can decrypt it so you can use that to verify the public half of the keypair that the site is also keeping?
[URL unfurl="true"]https://www.grc.com/sn/sn-445.htm[/URL]
Should just do something sensible like SQRL, or really any other solution.
Seriously, Gibson is a hack and a charlatan, no one serious in the industry respects him. There were several sites that debunk what he spewed, but they just stopped being maintained over 15 years ago because there was already too much information. Gibson total made things up (Socketgate?).
U2F which FIDO2 is based off of is well reviewed, and now included in the W3C specification through WebAuthN.
10 weeks ago
FIDO is that wonky thing where where the site is what is actually storying your keypair, but with you having locally encrypted it so it can give it to you so you can decrypt it so you can use that to verify the public half of the keypair that the site is also keeping?
[URL unfurl="true"]https://www.grc.com/sn/sn-445.htm[/URL]
Should just do something sensible like SQRL, or really any other solution.
[URL unfurl="true"]https://www.grc.com/sn/sn-445.htm[/URL]
Should just do something sensible like SQRL, or really any other solution.
10 weeks ago
And notice how devoid of the usual comments ("about time!", "what could go wrong", "how about you fix your software, Tim.", "X dollars? that's insane!", "insert dad joke here") this thread is. People are more likely to complain about what they don't quite fully understand but not about what they know nothing about IMHO.
10 weeks ago
This is some great news that is highly underrated. This gets us a lot closer to getting rid of the stupid password-based approach.
Besides that: A lot of countries have developed NFC capable ID cards that can now be put to work...
And, no, since those cards don't hand out the private key, this will not lead to more identity theft. In fact, it will help fight it.
Besides that: A lot of countries have developed NFC capable ID cards that can now be put to work...
And, no, since those cards don't hand out the private key, this will not lead to more identity theft. In fact, it will help fight it.
This is great news for the 8 people who will ever use this totally obscure feature.
10 weeks ago
"it has awesome security" -steve jobs
[ Read All Comments ]
Instagram is dropping the IGTV button from the top-right corner of the app's home screen because not enough people are interacting with it.
First launched in June 2018, IGTV is...
Epic Games' latest update to the iOS version of popular battle royale title Fortnite that enables iPad Pro owners to run the game at 120 frames per second.
iPad Pro owners wanting to make...
Apple CEO Tim Cook has taken to Twitter this weekend to share a behind-the-scenes look at the making of new Apple TV+ show "Little America."
The entire first season of the immigrant...
It was a busy week of rumors as we hit the middle of January, with reports about updates to Face ID in the iPhone 12 lineup later this year, signs of a new Mac notebook coming soon, and word that...
Apple has inked a deal for a docuseries called "Dear..." that profiles famous people using an "inventive and cinematic approach" that involves letters written by people whose lives...
Amazon is no longer selling new versions of the Apple Watch Series 4 and Series 5 models through its online store in the United States, with the listings disappearing earlier today.
There is no...
Asphalt 9: Legends, a game that was ported to the Mac using Apple's Mac Catalyst tools, is now available for download from the Mac App Store.
The app was one of the titles that Apple...
Apple is expanding its presence in Germany with plans to open a new office building in Munich, Germany, according to German news site Süddeutsche Zeitung.
Located in the "Karl" office...
