<story><title>GitHub supports Universal 2nd Factor authentication</title><url>https://github.com/blog/2071-github-supports-universal-2nd-factor-authentication</url></story><parent_chain></parent_chain><comment><author>moreati</author><text>A few U2F details worth mentioning&lt;p&gt;Browser support is currently limited to Chrome, and possible Windows Edge*&lt;p&gt;For now it only works with USB. Bluetooth and NFC specs are out, browser support is the bottleneck&lt;p&gt;The protocol is public&amp;#x2F;private key based, with the private key strongly encouraged to be in tamper resistant&amp;#x2F;evident storage.&lt;p&gt;The protocol is authentication method agnostic. It doesn&amp;#x27;t care if you use a USB key, a retinal scan, a pin or divination.&lt;p&gt;You could write a software only authenticator if you wanted, but servers could detect that (and reject it if they chose to) through the attestation certificate you provided. You can&amp;#x27;t pretend to be a brand X authenticator, because only company X will have the private key(s) matching the attestation certs to sign (batches) of model X authenticator.&lt;p&gt;Yubikeys are just one implementation of a U2F authenticator. In theory GitHub now works with any present&amp;#x2F;future authenticators that talks U2F (modulo browser support) e.g. an iPhone+TouchID+NokNok SDK, a Pebble watch+app, an Android Phone+$your_app, an NFC implant, m-of-n wearables&lt;p&gt;* Microsoft announced something U2F related for Windows 10, I never got to the bottom of what exactly&lt;p&gt;For more detail I did a talk at EuroPython this year &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;moreati.github.io&amp;#x2F;passwordspain&amp;#x2F;#&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;moreati.github.io&amp;#x2F;passwordspain&amp;#x2F;#&amp;#x2F;&lt;/a&gt; &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=YSTsgldazSU&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=YSTsgldazSU&lt;/a&gt;</text></comment>
<story><title>GitHub supports Universal 2nd Factor authentication</title><url>https://github.com/blog/2071-github-supports-universal-2nd-factor-authentication</url></story><parent_chain></parent_chain><comment><author>gbraad</author><text>&amp;quot;Note: FIDO U2F authentication is currently only available for the Chrome browser.&amp;quot; &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;help.github.com&amp;#x2F;articles&amp;#x2F;providing-your-2fa-authentication-code&amp;#x2F;#using-a-fido-u2f-security-key&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;help.github.com&amp;#x2F;articles&amp;#x2F;providing-your-2fa-authenti...&lt;/a&gt;</text></comment>