2FA with Krypton

ulmus · 22 Jun 2020, 05:29 PM

Today i tried to login to fastmail as usual... i have Krypton hardware key emulator on mobile. Today i can see the new login page, i can choose to login with hardware key, i chose that, all went ok, grenn check-in mark on login page, but above there is text that something is wrong...

i had to login with TOTP... till now i had no problems with Krypton....

ulmus · 22 Jun 2020, 05:41 PM

I tried now my Feitian key... and it doesnt work now!, after inserted into usb it is lit up green always... and i cannot login to fastmail, google.. wtf?! windows update??

jsfrederick · 23 Jun 2020, 12:14 AM

I suspect it has to do with Fastmail's move from U2F to Webauthn.

Your key MANY not be backward compatible. Or your Browser may not support Webauthn.

What browser are you using?

NumberSix · 23 Jun 2020, 11:31 AM

Quote:

Originally Posted by jsfrederick

I suspect it has to do with Fastmail's move from U2F to Webauthn.

I don't see this mentioned on the blog. Can you point me to any technical discussion of this change?

ulmus · 23 Jun 2020, 03:05 PM

Quote:

Originally Posted by jsfrederick

What browser are you using?

The newest Firefox (windows 10)

ulmus · 23 Jun 2020, 04:23 PM

Quote:

Originally Posted by jsfrederick

I suspect it has to do with Fastmail's move from U2F to Webauthn.

Your key MANY not be backward compatible. Or your Browser may not support Webauthn.

I hope you are wrong... it is impossible to cut me out from possibility to log in, if it was possible earlier, without any warning!

jsfrederick · 23 Jun 2020, 11:17 PM

Quote:

Originally Posted by NumberSix

I don't see this mentioned on the blog. Can you point me to any technical discussion of this change?

No discussion that I found. Saw the notes in the iOS app update a few days ago. Been trying to track down an answer from Fastmail.

I did delete and reregister a couple of my YubiKeys and noticed that they now say Webauthn vs U2F on the list of security keys.

jsfrederick · 23 Jun 2020, 11:18 PM

Quote:

Originally Posted by ulmus

I hope you are wrong... it is impossible to cut me out from possibility to log in, if it was possible earlier, without any warning!

I've not been able to determine if the Krypton Key supports U2F only or WebAuthn.

ulmus · 29 Jun 2020, 02:44 PM

FYI Resolved: I had to register the same key once more and delete previous registration of that key.

22 Jun 2020, 05:29 PM	#1
ulmus Essential Contributor Join Date: Feb 2011 Location: Poland Posts: 200	2FA with Krypton Today i tried to login to fastmail as usual... i have Krypton hardware key emulator on mobile. Today i can see the new login page, i can choose to login with hardware key, i chose that, all went ok, grenn check-in mark on login page, but above there is text that something is wrong... i had to login with TOTP... till now i had no problems with Krypton....

22 Jun 2020, 05:41 PM	#2
ulmus Essential Contributor Join Date: Feb 2011 Location: Poland Posts: 200	I tried now my Feitian key... and it doesnt work now!, after inserted into usb it is lit up green always... and i cannot login to fastmail, google.. wtf?! windows update??

23 Jun 2020, 12:14 AM	#3
jsfrederick Junior Member Join Date: Nov 2010 Posts: 9	I suspect it has to do with Fastmail's move from U2F to Webauthn. Your key MANY not be backward compatible. Or your Browser may not support Webauthn. What browser are you using?

29 Jun 2020, 02:44 PM	#9
ulmus Essential Contributor Join Date: Feb 2011 Location: Poland Posts: 200	FYI Resolved: I had to register the same key once more and delete previous registration of that key.