[webauthn] Support for apps acting as platform authenticators for authenticating in mobile browsers (#1150)

holycleugh has just created a new issue for https://github.com/w3c/webauthn:

== Support for apps acting as platform authenticators for authenticating in mobile browsers ==
I understand that a mobile device can be used to authenticate a desktop browser via bluetooth or NFC. Do Android or iOS have any mechanisms to allow 3rd party mobile apps to act as platform authenticators for the mobile browser?

As far as I can tell, there's no mechanism for discovering platform authenticators other than the built-in ones like fingerprint readers. If the user is authenticating to a browser on a desktop, the browser and the mobile app can communicate via bluetooth, for example, but it isn't possible (to my knowledge) for a phone to connect to itself over bluetooth.

Krypton uses a browser extension instead of bluetooth for communication, but browser extensions are not commonly supported on default mobile browsers either.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1150 using your GitHub account

Received on Sunday, 3 February 2019 00:51:46 UTC