FIDO U2F High-level API

[hultqvist]

http://fidoalliance.org/specs/fido-u2f-javascript-api-v1.0-rd-20141008.pdf

[arakis]

Which browser already support this? Is there any link/documentation to w3.org, too?

[hultqvist]

FIDO alliance appears to be the place for cooperation regarding U2F.

Google Chrome is the only browser I know of, currently it has out of the box support on google domains.
You can still get the same api to work on any domain by using a chrome extension and adding a link in your html header. The link can be removed once it is fully included.

I wrote a fully working registration and signing implementation before sending this pull request.
Though a few of the low level classes that is included was not used there.

[danelkhen]

That's cool!

But wouldn't it be better to put it in a separate assembly?

[hultqvist]

U2F has a way to go to be available in all browsers, people push for it to be in firefox as well but so far not much is happening there.

One reason to not make it a separate assembly is that it is not really an assembly library but an API into the browser. I linked to a chrome extension previously but that is only intended as a temporary workaround, later the API will work without any extra code added to a page.

Specifically the HtmlContect.window.u2f is hard to add in a separate assembly.

I could change it to be U2F.window.u2f in a separate assembly, but it doesn't look as good and won't be as discoverable. What do you think?

[arakis]

In my opinion, we should wait until it's official in the w3c specification, and integrated in firefox, too.

[danelkhen]

Well if it's planned to go into w3c I don't see a problem with adding it now. But if we're not sure or the API will change, perhaps it will be safer to add it as a separate assembly, but also not critical.

[hultqvist]

Feel free to do as you choose, when it is final in chrome and implemented in Firefox i can push this again.