<story><title>GitHub Supports Web Authentication (WebAuthn) for Security Keys</title><url>https://github.blog/2019-08-21-github-supports-webauthn-for-security-keys/</url></story><parent_chain></parent_chain><comment><author>sebazzz</author><text>&amp;gt; GitHub supported physical security keys using the experimental U2F API for Chrome&lt;p&gt;Yes, and to make it worse, they used user agent sniffing instead of feature detection even though it work fine in Firefox. Firefox enabled U2F because many sites which do implement U2F, do not implement WebAuthn yet. Luckily, it appears Github is now on the right track.</text></comment>
<story><title>GitHub Supports Web Authentication (WebAuthn) for Security Keys</title><url>https://github.blog/2019-08-21-github-supports-webauthn-for-security-keys/</url></story><parent_chain></parent_chain><comment><author>StavrosK</author><text>This is fantastic. I look forward to finally having much easier authentication on the web. Imagine browsers syncing between devices a single encryption key that will authenticate you to all sites, which you can easily back up to a piece of paper.&lt;p&gt;EDIT: Unfortunately, it looks like the WebAuthn credential is only used as the second factor, so you can&amp;#x27;t use it to replace your password yet, let alone your username.</text></comment>