FYI: thread on migrating to WebAuthn from U2F

Users of U2F APIs should migrate to Webauthn
https://groups.google.com/a/chromium.org/d/msg/security-dev/BGWA1d7a6rI/W2avestmBAAJ

Indepth reply from Lucas Garron of GitHub:
https://groups.google.com/a/chromium.org/d/msg/security-dev/BGWA1d7a6rI/zy1SwdC9BAAJ

It seems there are items buried in Lucas' msg that we ought to parse out
into spec issues for at least explanatory Notes, and also guidance for
WebAuthn explainers.

There's other interesting info in that thread wrt the using the Ruby
WebAuthn library in U2F -> WebAuthn migration, and also credential
signature algs folks are employing.

HTH,

=JeffH

Received on Monday, 3 June 2019 23:22:39 UTC