Support for CTAP2 FIDO devices via the Web Authentication API

This feature adds support for CTAP2 devices, which provide advanced security capabilities such as biometric authentication and resident keys (keys stored on the device). The WebAuthentication API (https://www.chromestatus.com/feature/5669923372138496) formerly only supported Universal 2nd Factor (U2F, also known as CTAP1 ) devices at the transport layer. This change doesn't alter the API surface itself but enables richer device interactions via the existing Web Authentication API.

Specification

Working draft or equivalent

Status in Chromium

Blink>WebAuthentication


Enabled by default (tracking bug) in:

  • Chrome for desktop release 69
  • Opera release 56
  • Opera for Android release 56

Consensus & Standardization

After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.

  • In development
  • In development
  • No public signals
  • No signals

Owners

Last updated on 2018-07-19