[B! WebAuthn] braitomã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

braitom id:braitom

WebAuthnã«é–¢ã™ã‚‹braitomã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (25)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Appleã®ç™ºè¡¨ã—ãŸPasskeys in iCloud Keychainã¯WebAuthnã‚’ã©ã†å¤‰ãˆã‚‹ã®ã‹ - r-weblife
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€ritouã§ã™ã€‚ å…ˆæ—¥ã®WWDC2021ã® "Move beyond passwords" ã¨ã„ã†ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ã¦ç™ºè¡¨ã•ã‚ŒãŸ "Passkeys in iCloud Keychain" ã¨ã„ã†ä»•çµ„ã¿ã«ã¤ã„ã¦ã©ã‚“ãªã‚‚ã®ã‹ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ developer.apple.com WebAuthn æ•°å¹´å‰ã‹ã‚‰ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã‚’ç½®ãæ›ãˆã‚‹ã¨è¨€ã‚ã‚Œç¶šã‘ã¦ã„ã‚‹èªè¨¼æŠ€è¡“ã®ä¸€ã¤ã§ã‚ã‚‹ "WebAuthn" (ã‚„FIDO)ã¨ã„ã†æŠ€è¡“ã‚’ã”å˜çŸ¥ã§ã—ã‚‡ã†ã‹ã€‚(ã”å˜çŸ¥ãªã„æ–¹ã¯ "WebAuthn builderscon" "WebAuthn droidkaigi" ãªã©ã§æ¤œç´¢ã—ã¦ã¿ã¾ã—ã‚‡ã†) ä»Šå›žã®è©±ã‚’ã™ã‚‹ã«ã‚ãŸã£ã¦ã€WebAuthnãŒã©ã‚“ãªã‚‚ã®ã‹ã‚’ã‚ã‚‹ç¨‹åº¦ç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å…¬é–‹éµæš—å·ã®ä»•çµ„ã¿ã‚’åˆ©ç”¨ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã®ã‚ˆã†ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ãƒã‚°ã‚¤ãƒ³å¯¾è±¡ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…±æœ‰ã™ã‚‹
braitom 2021/06/25
åˆ†ã‹ã‚Šã‚„ã™ã„ã€‚â€œPasskeys in iCloud KeyChainã¯iCloud KeyChainã®åŒæœŸã®æ–¹æ³•ã‚’ç”¨ã„ã¦ã€ç§˜å¯†éµã‚’å®‰å…¨ã«å…±æœ‰ã™ã‚‹ãŸã‚ã®ä»•çµ„ã¿ã§ã‚ã‚‹â€

WebAuthn

Apple
ãƒªãƒ³ã‚¯
Meet Face ID and Touch ID for the Web
People often see passwords are the original sin of authentication on the web. Passwords can be easy to guess and vulnerable to breaches. Frequent reuse of the same password across the web makes breaches even more profitable. As passwords are made stronger and unique, they can quickly become unusa ble for many users. Passwords indeed look notorious, but are passwords themselves the probl em, or is it
braitom 2020/10/23
WebAuthnã§FaceID/TouchIDã‚’åˆ©ç”¨ã™ã‚‹æ–¹æ³•ã«ã¤ã„ã¦ã€‚

security

WebAuthn

safari

Apple
ãƒªãƒ³ã‚¯
Guide to Web Authentication
WebAuthnA better alternative for securing our sensitive information online Often a password is all that lies between a malicious user and our bank accounts, social media accounts, and other sensitive data.Passwords have an ever-growing list of probl ems associated with them, both for users and developers. Users have to worry about passwords being stolen by phishing tools, or their passwords being l
braitom 2020/01/07
WebAuthnã«ã¤ã„ã¦ã®èª¬æ˜Žè¨˜äº‹ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ™ãƒ¼ã‚¹èªè¨¼ã®å¼±ç‚¹ã€ãã‚Œã‚’è§£æ±ºã™ã‚‹ãŸã‚ã«WebAuthnãŒã©ã†æœ‰ç”¨ãªã®ã‹ã€WebAuthnä»•çµ„ã¿ã®èª¬æ˜Žã‚„å®Ÿè£…æ–¹æ³•ãªã©ãŒã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã€‚

WebAuthn
ãƒªãƒ³ã‚¯
WebAuthN å®Ÿéš›å°Žå…¥ã—ã¦ã©ã†ã ã£ãŸã‹
Nulab ã® Backlog, Cacoo ã¨ Typetalk ã« WebAuthn ã‚’å°Žå…¥ã—ã¦çµŒé¨“ã—ãŸ 10 ã®ã“ã¨
braitom 2019/10/29
ãƒŒãƒ¼ãƒ©ãƒœã§WebAuthnã‚’å°Žå…¥ã—ãŸã¨ãã®è©±ã€‚ãƒã‚°ã‚¤ãƒ³ã‚’ã©ã®ã‚ˆã†ãªè¨è¨ˆã«è½ã¨ã—ãŸã‹ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ãƒªã‚«ãƒãƒªè¨è¨ˆã€å®Ÿè£…ãŒé›£ã—ã‹ã£ãŸç‚¹ãªã©ãŒã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã€‚

WebAuthn
ãƒªãƒ³ã‚¯
WebAuthn/FIDOã®UXå¾¹åº•è§£èª¬ ~å®Ÿã‚µãƒ¼ãƒ“ã‚¹ã¸ã®å°Žå…¥ã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’æ·»ãˆã¦~ / builderscon tokyo 2019 ritou
ä¸‹è¨˜ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã§ã®ç™ºè¡¨è³‡æ–™ã§ã™ã€‚ https://builderscon.io/builderscon/tokyo/2019/session/c9da9bfb-c97c-4f93-a496-ff83b3ca61bc
braitom 2019/08/30
WebAuthnã®èªè¨¼ãƒ•ãƒãƒ¼ã‚’å®Ÿéš›ã«å®Ÿè£…ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®èªè¨¼ç”»é¢ã‚’å…ƒã«èª¬æ˜Žã—ã¦ã„ã‚‹è³‡æ–™ã€‚

WebAuthn

FIDO
ãƒªãƒ³ã‚¯
GitHub supports Web Authentication (WebAuthn) for security keys
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
braitom 2019/08/22
GitHubãŒWebAuthnã‚’ã‚µãƒãƒ¼ãƒˆã€‚Yubikeyãªã©ã®ç‰©ç†ã‚ãƒ¼ã ã‘ã§ãªãWinsows Helloã€Touch IDãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ã‚ãƒ¼ã‚‚åˆ©ç”¨å¯èƒ½ã«ã€‚

github

WebAuthn
ãƒªãƒ³ã‚¯
ãƒŒãƒ¼ãƒ©ãƒœã€æŒ‡ç´‹ã‚„é¡”ãªã©ã§ã‚µãƒ¼ãƒ“ã‚¹ã«ãƒã‚°ã‚¤ãƒ³ã§ãã‚‹ã€Œç”Ÿä½“èªè¨¼ãƒã‚°ã‚¤ãƒ³ã€æä¾›ã‚’é–‹å§‹ | ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ | æ ªå¼ä¼šç¤¾ãƒŒãƒ¼ãƒ©ãƒœ(Nulab inc.)
ï¼œãƒˆãƒ”ãƒƒã‚¯ã‚¹ï¼ž ãƒŒãƒ¼ãƒ©ãƒœã¯ã€æŒ‡ç´‹ã‚„é¡”ãªã©ã§ã‚µãƒ¼ãƒ“ã‚¹ã«ãƒã‚°ã‚¤ãƒ³ã§ãã‚‹ã€Œç”Ÿä½“èªè¨¼ãƒã‚°ã‚¤ãƒ³ã€ã®æä¾›ã‚’2019å¹´7æœˆ1æ—¥(æœˆ)ã‚ˆã‚Šé–‹å§‹ ã€ŒBacklogã€ãªã©ãƒŒãƒ¼ãƒ©ãƒœãŒæä¾›ã—ã¦ã„ã‚‹ã™ã¹ã¦ã®ã‚µãƒ¼ãƒ“ã‚¹ã«ã²ã¨ã¤ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ãƒã‚°ã‚¤ãƒ³ã§ãã‚‹ã€ŒãƒŒãƒ¼ãƒ©ãƒœã‚¢ã‚«ã‚¦ãƒ³ãƒˆã€ã¸ã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«åˆ©ç”¨å¯èƒ½ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®åˆ©ä¾¿æ€§å‘ä¸Šã®ã¿ãªã‚‰ãšã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ã«ã‚ˆã‚Šãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æµå‡ºã®å±é™ºãŒãªããªã‚‹ãªã©ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã®å®‰å¿ƒã‚‚é«˜ã¾ã‚‹ ãƒãƒ¼ãƒ ã®åƒãã‚’æ¥½ã—ãã™ã‚‹ã‚³ãƒ©ãƒœãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ„ãƒ¼ãƒ«ã€ŒBacklogã€ã€ŒCacooã€ã€ŒTypetalkã€ã‚’é‹å–¶ã™ã‚‹æ ªå¼ä¼šç¤¾ãƒŒãƒ¼ãƒ©ãƒœï¼ˆæœ¬ç¤¾ï¼šç¦å²¡çœŒç¦å²¡å¸‚ã€ä»£è¡¨å–ç· å½¹ï¼šæ©‹æœ¬æ£å¾³ã€ä»¥ä¸‹ ãƒŒãƒ¼ãƒ©ãƒœï¼‰ã¯ã€æŒ‡ç´‹ã‚„é¡”ãªã©ã§ã‚µãƒ¼ãƒ“ã‚¹ã«ãƒã‚°ã‚¤ãƒ³ã§ãã‚‹ã€Œç”Ÿä½“èªè¨¼ãƒã‚°ã‚¤ãƒ³ã€ã®æä¾›ã‚’2019å¹´7æœˆ1æ—¥(æœˆ)ã‚ˆã‚Šé–‹å§‹ã—ã¾ã—ãŸã€‚ ãƒŒãƒ¼ãƒ©ãƒœãŒæä¾›ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã¸ã®ãƒã‚°ã‚¤ãƒ³ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒä¸è¦ã«ãªã‚‹ã“ã¨ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®åˆ©ä¾¿æ€§ãŒå‘ä¸Šã™ã‚‹ã†ãˆã€ãƒ‘ã‚¹ãƒ¯ãƒ¼
braitom 2019/07/01
ãŠãƒ¼ã€‚ãƒŒãƒ¼ãƒ©ãƒœãŒWebAuthnå¯¾å¿œã€‚

WebAuthn
ãƒªãƒ³ã‚¯
PyPI Now Supports Two-Factor Login via WebAuthn
braitom 2019/06/22
PyPIãŒ2FAã‚’ã‚µãƒãƒ¼ãƒˆã€‚WebAuthnä½¿ã£ã¦ã‚‹ã€‚

python

WebAuthn
ãƒªãƒ³ã‚¯
Introduction to WebAuthn Testing API
An Introduction to Google Chrome WebAuthn Testing API
braitom 2019/06/02
WebAuthnã®E2Eãƒ†ã‚¹ãƒˆã«ã¤ã„ã¦ã€‚Authenticatorãƒ‡ãƒã‚¤ã‚¹ã§ã®æ‰‹å‹•æ“ä½œãŒå¿…è¦ã«ãªã‚‹éƒ¨åˆ†ã¯WebAuthn Testing APIã¨ã„ã†Chromeã®APIã‚’ä½¿ã£ã¦ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ãƒˆã§ãã‚‹ã€‚

WebAuthn

E2E
ãƒªãƒ³ã‚¯
GitHub - webauthn4j/webauthn4j: A portable Java library for WebAuthn(Passkeys) server side verification
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
braitom 2019/05/19
â€œA portable Java library for WebAuthn server side verificationâ€

WebAuthn

java
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¸è¦ãªä¸–ç•Œã¯ã„ã‹ã«ã—ã¦å®Ÿç¾ã•ã‚Œã‚‹ã®ã‹ - FIDO2 ã¨ WebAuthn ã®åŸºæœ¬ã‚’çŸ¥ã‚‹
ä¸æ£é€é‡‘ã‚„ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ä¹—ã£å–ã‚Šãªã©ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒåŽŸå› ã®äº‹ä»¶ãŒå¾Œã‚’çµ¶ã¡ã¾ã›ã‚“ã€‚é«˜é½¢è€…ãªã©ã€IT ãƒªãƒ†ãƒ©ã‚·ã®ä½Žã„äººã§ã‚‚ç°¡å˜ã‹ã¤å®‰å…¨ã«è‡ªåˆ†ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ç®¡ç†ã§ãã‚‹ä¸–ç•ŒãŒç†æƒ³ã§ã™ãŒã€ã¾ãšã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¸è¦ãªä¸–ç•Œã‚’å®Ÿç¾ã™ã‚‹ã®ãŒå…ˆæ±ºã§ã‚ã‚‹ã“ã¨ã¯ã€ã“ã‚Œã¾ã§ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æ´å²ã§è¨¼æ˜Žã•ã‚ŒãŸã¨è¨€ãˆã‚‹ã§ã—ã‚‡ã†ã€‚ãã—ã¦ã€ã“ã“ã«æ¥ã¦ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä¸è¦ãªãƒã‚°ã‚¤ãƒ³ã‚’å®Ÿç¾ã™ã‚‹æŠ€è¡“ã¨ã—ã¦æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ã®ãŒ FIDO (= Fast IDentity Online, ã€Œãƒ•ã‚¡ã‚¤ãƒ‰ã€) ã§ã™ã€‚ãã—ã¦ãã® FIDO ã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã®ãŒ WebAuthn (= Web Authenticationã€ã€Œã‚¦ã‚§ãƒ–ã‚ªãƒ¼ã‚¹ãƒ³ã€)ã€‚å ±é“å†…å®¹ãªã©ã‹ã‚‰ã“ã‚Œã‚‰ã¯æŒ‡ç´‹èªè¨¼ã‚’å®Ÿç¾ã™ã‚‹ã‚‚ã®ã€ã¨æ€ã£ã¦ã„ã‚‹äººã‚‚ã„ã‚‰ã£ã—ã‚ƒã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€å®Ÿéš›ã«ã¯ã¡ã‚‡ã£ã¨é•ã„ã¾ã™ã€‚ WebAuthn ã«é–¢ã—ã¦ã¯ã€ã™ã§ã«æ•°å¤šãã®è¨˜äº‹ãŒå‡ºã¦ã„ã¾ã™ã®ã§
braitom 2019/03/14
ã“ã®è€ƒãˆãŒå¤§äº‹ã ã‚ˆãªã‚ã€‚â€œç”Ÿä½“èªè¨¼ã«ä½¿ã‚ã‚Œã‚‹ç”Ÿä½“ã®ãƒ‡ãƒ¼ã‚¿ãŒã€ãã®ãƒ‡ãƒã‚¤ã‚¹ã«ã®ã¿ä¿å˜ã•ã‚Œã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚„ç„¡é–¢ä¿‚ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‹ã‚‰ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã‚ˆã†ã«å®ˆã‚‰ã‚Œã¦ã„ã‚‹ãŸã‚ã§ã™â€

WebAuthn

FIDO
ãƒªãƒ³ã‚¯
W3C and FIDO Alliance Finalize Web Standard for Secure, Passwordless Logins
Major browsers and platforms have built-in support for new Web standard for easy and secure logins via biometrics, mobile devices and FIDO security keys Read testimonials from W3C Members https://www.w3.org/, and MOUNTAIN VIEW, Calif., â€” 4 March 2019 â€” The World Wide Web Consortium (W3C) and the FIDO Alliance today announced the Web Authentication (WebAuthn) specification is now an official web st
braitom 2019/03/05
W3Cã¨FIDOã‚¢ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ãŒWebAuthnã‚’æ£å¼å‹§å‘Šã—ãŸã€‚

WebAuthn
ãƒªãƒ³ã‚¯
WebAuthnã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ãªã‚µã‚¤ãƒˆã‚’ä½œã‚‹ã€‚å®‰å…¨ãªã‚ªãƒ³ãƒ©ã‚¤ãƒ³èªè¨¼ã‚’å°Žå…¥ã™ã‚‹FIDOã®åŸºæœ¬ - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢Hubï½œWebã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã‚ãƒ£ãƒªã‚¢ã‚’è€ƒãˆã‚‹ï¼
WebAuthnã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ãªã‚µã‚¤ãƒˆã‚’ä½œã‚‹ã€‚å®‰å…¨ãªã‚ªãƒ³ãƒ©ã‚¤ãƒ³èªè¨¼ã‚’å°Žå…¥ã™ã‚‹FIDOã®åŸºæœ¬ FIDOï¼ˆFastÂ IDentityÂ Onlineï¼‰ã¨ã¯ã€å…¬é–‹éµèªè¨¼æ–¹å¼ã‚’å¿œç”¨ã—ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³çµŒç”±ã§èªè¨¼ã‚’è¡Œã†ä»•çµ„ã¿ã§ã™ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã®å®‰å…¨æ€§ã¯é™ç•ŒãŒæŒ‡æ‘˜ã•ã‚Œã‚‹ãªã‹ã€Webã‚µã‚¤ãƒˆã«ãŠã„ã¦ã‚‚ç”Ÿä½“èªè¨¼ãªã©ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ãªä»•çµ„ã¿ã‚’å°Žå…¥ã™ã‚‹ä¼æ¥ãŒå¢—ãˆã¦ãŠã‚Šã€ã“ã®FIDOã‚„WebAuthnã«æ³¨ç›®ãŒé›†ã¾ã£ã¦ã„ã¾ã™ã€‚Capyæ ªå¼ä¼šç¤¾ã§æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ç ”ç©¶é–‹ç™ºã‚„åˆ†æžãªã©ã«æºã‚ã‚‹ã€æ¾æœ¬æ‚¦å®œã•ã‚“ã®è§£èª¬ã§ã™ã€‚ ã“ã‚“ã«ã¡ã¯ã€æ¾æœ¬æ‚¦å®œï¼ˆ@ym405nmï¼‰ã§ã™ã€‚ FIDOï¼ˆãµãã„ã©ï¼‰ã«é–¢ã—ã¦ã¯ã€æ˜¨å¹´ï¼ˆ2018å¹´ï¼‰ã‹ã‚‰å¤šãã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚„æŠ€è¡“ãƒ–ãƒã‚°ã§å–ã‚Šä¸Šã’ã‚‰ã‚Œã€å°Žå…¥ã™ã‚‹Webã‚µã‚¤ãƒˆã‚‚å¢—ãˆã¦ã„ã¾ã™ã€‚ FIDO2ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«ãŠã„ã¦è©±é¡Œã«ãªã£ãŸWebAuthnï¼ˆWeb Authentication APIï¼‰ã«ã¤ã„ã¦ã‚‚ã€ä¸»ãªW
braitom 2019/02/13
FIDO

WebAuthn
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹èªè¨¼WebAuthnã®å‹˜æ‰€ã¨å¯¾å¿œçŠ¶æ³ | gihyo.jp
ã¯ã˜ã‚ã« å…ˆæ—¥ç™ºè¡¨ã•ã‚ŒãŸã€ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æŒ‡ç´‹èªè¨¼ã§ã®ãƒã‚°ã‚¤ãƒ³ã‚„ã€Microsoft Accountã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ¼ã§ã®ãƒã‚°ã‚¤ãƒ³ãŒå¯èƒ½ã«ã¨ã„ã£ãŸãƒ‹ãƒ¥ãƒ¼ã‚¹ã«Web Authentication APIï¼ˆä»¥ä¸‹WebAuthnï¼‰ç•Œéšˆã¯ç››ã‚Šä¸ŠãŒã‚Šã‚’è¦‹ã›ã¦ã„ã¾ã™ã€‚ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã‚ãªã„ä¸–ç•Œã‚’ç›®æŒ‡ã—ãŸFIDO Allianceã¨ã€W3Cã®å–ã‚Šçµ„ã¿ã¯å¤§ããå‰é€²ã—ãŸã¨ã„ãˆã‚‹ã§ã—ã‚‡ã†ã€‚2018å¹´ã«ã€FIDOé–¢é€£æŠ€è¡“ãŒã“ã“ã¾ã§ç››ã‚Šä¸ŠãŒã£ãŸç†ç”±ã¯ã€é–“é•ã„ãªããƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã®å¯¾å¿œãŒé€²ã‚“ã ã“ã¨ã«ã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ç§ã¯YubiKeyã®è²©å£²ãƒ»ã‚µãƒãƒ¼ãƒˆæ¥å‹™ã‚’ãã£ã‹ã‘ã«FIDOã‚„WebAuthnã¨ã„ã£ãŸæŠ€è¡“é ˜åŸŸã«èˆˆå‘³ã‚’ã‚‚ã¡ã€ä»•äº‹ãƒ»ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã¨ã‚‚ã«èª¿æŸ»ã‚’è¡Œã£ã¦ãã¾ã—ãŸã€‚ã‚‚ã¨ã‚‚ã¨èªè¨¼ã«ã¤ã„ã¦ã®çŸ¥è˜ãŒã‚¼ãƒã ã£ãŸç§ã«ã¯ã€å¤§ããªå£ãŒã„ãã¤ã‚‚ç«‹ã¡ã¯ã ã‹ã‚Šã¾ã—ãŸã€‚ æœ¬ç¨¿ã§ã¯ã€ã“ã‚Œã‹ã‚‰WebAuthnã‚’å¦ç¿’ã—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹æ–¹ã«ã€èªè¨¼åˆå¿ƒè€…
braitom 2019/01/09
WebAuthnã®æ¦‚è¦ã€ä»•çµ„ã¿ã€ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã”ã¨ã®å¯¾å¿œçŠ¶æ³ãŒã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã€‚åˆ†ã‹ã‚Šã‚„ã™ã„ã€‚

WebAuthn

èªè¨¼

FIDO
ãƒªãƒ³ã‚¯
Yahoo! JAPANã§ã®ç”Ÿä½“èªè¨¼ã®å–ã‚Šçµ„ã¿ï¼ˆFIDO2ã‚µãƒ¼ãƒãƒ¼ã®ä»•çµ„ã¿ã«ã¤ã„ã¦ï¼‰
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ç›®æ¬¡ ã¯ã˜ã‚ã« Yahoo! JAPANãŒå¯¾å¿œã—ãŸWebAuthnã¨ã¯ WebAuthnã¨FIDOèªè¨¼ã«ã¤ã„ã¦ WebAuthnã®å‡¦ç†ã«ã¤ã„ã¦ ç™»éŒ²ã¨èªè¨¼ã®æµã‚Œ å‰Šé™¤æ©Ÿèƒ½ ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã§ã®å®Ÿè£… navigator.credentials.create()ã«ã¤ã„ã¦ navigator.credentials.get()ã«ã¤ã„ã¦ ã‚µãƒ¼ãƒãƒ¼ã§ã®å®Ÿè£… ç™»éŒ²ï¼ˆå…¬é–‹éµã®ç™»éŒ²ï¼‰ /attestation/optionsã®å‡¦ç† ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ navigator.credentials.create()ã®å¼•æ•°ã«å¿…è¦ãªå€¤ /attestation/resultã®å‡¦ç† CBORã«ã¤ã„ã¦ attestationObjectã«ã¤ã„ã¦ å…¬é–‹éµã‚’ä½œæˆã™
braitom 2018/12/08
WebAuthnã®å‡¦ç†ã®æµã‚Œã€ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼å´ã¨ã‚µãƒ¼ãƒãƒ¼å´ã®å®Ÿè£…æ–¹æ³•ã«ã¤ã„ã¦ã‚ã¡ã‚ƒãã¡ã‚ƒè©³ã—ãæ›¸ã‹ã‚Œã¦ã„ã‚‹ã€‚

FIDO

WebAuthn
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã—ã§MSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã‚µã‚¤ãƒ³ã‚¤ãƒ³ã€ã€ŒEdgeã€ã§å¯èƒ½ã« - ZDNet Japan
Microsoftã¯ç±³å›½æ™‚é–“11æœˆ20æ—¥ã€ãƒ–ãƒ©ã‚¦ã‚¶ã€ŒEdgeã€ã‹ã‚‰ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã—ã§åŒç¤¾ã®å„ç¨®ãƒ¡ã‚¤ãƒ³ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ã‚µã‚¤ãƒ³ã‚¤ãƒ³ã§ãã‚‹ã‚ˆã†ã«ã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ Windows 10ãƒãƒ¼ã‚¸ãƒ§ãƒ³1809ã®Edgeã¯ã€ã€ŒWebAuthnã€ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã€‚WebAuthnã¯ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã—ã§ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ã‚µã‚¤ãƒ³ã‚¤ãƒ³ã™ã‚‹ãŸã‚ã®èªè¨¼è¦æ ¼ã¨ã—ã¦W3CãŒæ¨™æº–åŒ–ã—ãŸã‚‚ã®ã§ã€Googleã®ã€ŒChromeã€ã‚„Mozillaã®ã€ŒFirefoxã€ã§ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ã€‚ WebAuthnã«ã‚ˆã‚Šã€ç”Ÿä½“èªè¨¼ï¼ˆã€ŒWindows Helloã€ã«ã‚ˆã‚‹é¡”èªè¨¼ã‚„æŒ‡ç´‹èªè¨¼ï¼‰ã‚„ã€FIDO2æº–æ‹ ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ¼ï¼ˆYubicoã®ã€ŒYubiKeyã€ã‚„ and the Feitianã®ã€ŒBioPassã€ã‚ãƒ¼ï¼‰ã§ã€Edgeã‹ã‚‰å„ç¨®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ã‚µã‚¤ãƒ³ã‚¤ãƒ³ãŒå¯èƒ½ã ã€‚ ã€ŒWindowsã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å ´åˆã¯ã€Windows Helloã¾ãŸã¯FIDO2æº–æ‹ ã®ã‚»
braitom 2018/11/21
ã“ã‚Œã¯ãªã‹ãªã‹ã‚¤ãƒ³ãƒ‘ã‚¯ãƒˆã‚ã‚‹ã®ã§ã¯ã€‚â€œWindows 10ãƒãƒ¼ã‚¸ãƒ§ãƒ³1809ã®Edgeã¯ã€ã€ŒWebAuthnã€ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹â€

èªè¨¼

WebAuthn

windows
ãƒªãƒ³ã‚¯
WebAuthn ã¨ macOS Touch ID
WebAuthn API ã§ macOS ã® Touch ID ãŒ Chrome M70 ã§ä½¿ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸã€ã¨ã„ã†ã®ã‚’ Chrome ãƒªãƒªãƒ¼ã‚¹ãƒŽãƒ¼ãƒˆã‚’è¦‹ã¦æ°—ã«ãªã£ã¦ã„ãŸã®ã§è©¦ã—ãŸã€‚ FIDO2 ã‚‚è§¦ã‚ã†ã¨æ€ã£ãŸãŒå¯¾å¿œãƒ‡ãƒã‚¤ã‚¹ã‚’æŒã£ã¦ã„ãªã‹ã£ãŸã®ã§ macOS Touch ID ã§ã”ã¾ã‹ã—ãŸã€‚ çµæžœ
braitom 2018/11/02
WebAuthn
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ã€Androidã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã®ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ä¸Šã§ã®ãƒã‚°ã‚¤ãƒ³ãŒæŒ‡ç´‹èªè¨¼ãªã©ã®ç”Ÿä½“èªè¨¼ã«å¯¾å¿œ - ãƒ—ãƒ¬ã‚¹ãƒ«ãƒ¼ãƒ - ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾
æŒ‡å®šã•ã‚ŒãŸURLã¯å˜åœ¨ã—ã¾ã›ã‚“ã€‚ URLãŒæ£ã—ãå…¥åŠ›ã•ã‚Œã¦ã„ãªã„ã‹ã€ã“ã®ãƒšãƒ¼ã‚¸ãŒå‰Šé™¤ã•ã‚ŒãŸå¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚
braitom 2018/10/24
FIDO

WebAuthn

Yahoo
ãƒªãƒ³ã‚¯
YubiHSM 2 Now Qualified for AWS IoT Greengrass Hardware Security Integration | Yubico
With YubiKey thereâ€™s no tradeoff between great security and usability Why YubiKey Microsoft Microsoft IgniteYubico Enrollment SuiteYubico FIDO Pre-regYubiEnroll
braitom 2018/09/26
ç¬¬5ä¸–ä»£YubiKeyãŒç™»å ´

YubiKey

WebAuthn

FIDO
ãƒªãƒ³ã‚¯
Chrome 70ã‹ã‚‰ã€WebAuthnã§Macã®TouchIDã¨Androidã®æŒ‡ç´‹èªè¨¼ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§åˆ©ç”¨å¯èƒ½ã«ã€‚Webã‚µã‚¤ãƒˆã¸ã®ãƒã‚°ã‚¤ãƒ³ã‚‚ã‚¿ãƒƒãƒã§
Chrome 70ã‹ã‚‰ã€WebAuthnã§Macã®TouchIDã¨Androidã®æŒ‡ç´‹èªè¨¼ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§åˆ©ç”¨å¯èƒ½ã«ã€‚Webã‚µã‚¤ãƒˆã¸ã®ãƒã‚°ã‚¤ãƒ³ã‚‚ã‚¿ãƒƒãƒã§ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã‚ãšãƒ‡ãƒã‚¤ã‚¹å´ã§ã®æŒ‡ç´‹èªè¨¼ã‚„PINã‚³ãƒ¼ãƒ‰ãªã©ã«ã‚ˆã‚‹èªè¨¼ã«ã‚ˆã‚ŠWebã‚µã‚¤ãƒˆã¸ãƒã‚°ã‚¤ãƒ³ã§ãã‚‹WebAuthnã¯ã€2018å¹´4æœˆã«W3Cã®å‹§å‘Šå€™è£œã«ãªã‚Šã€Chromeã€Firefoxã€Microsoft Edgeã¸ã®å®Ÿè£…ãŒé€²ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ å‚è€ƒï¼šãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ä¾å˜ã—ãªã„èªè¨¼ã€ŒWebAuthnã€ã‚’Chrome/Firefox/EdgeãŒå®Ÿè£…é–‹å§‹ã€W3CãŒæ¨™æº–åŒ–ã€‚Webã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ä¾å˜ã—ãªã„ã‚ˆã‚Šå®‰å…¨ã§ä¾¿åˆ©ãªã‚‚ã®ã¸ Googleã¯5æœˆã«ãƒªãƒªãƒ¼ã‚¹ã—ãŸChrome 67ã§WebAuthnã¸ã®å¯¾å¿œã‚’è¡Œã„ã¾ã—ãŸãŒã€10æœˆã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã‚‹Chrome 70ã§ã¯å®Ÿè£…ã‚’é€²åŒ–ã•ã›ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§Macã®TouchIDã¨Androidã®æŒ‡ç´‹èªè¨¼ã«å¯¾å¿œã™ã‚‹ã“
braitom 2018/09/20
ãŠãƒ¼ã“ã‚Œã¯æœŸå¾…

WebAuthn

Chrome
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸