Microsoft Previews Password Alternative in Edge Browser -- Redmondmag.com

Microsoft Previews Password Alternative in Edge Browser

By Kurt Mackie
07/30/2018

Microsoft announced on Monday that its Microsoft Edge browser now supports the Web Authentication spec at the preview stage, enabling the testing of an alternative means of carrying out user authentications besides passwords.

The Web Authentication spec is a standard for the use of public key cryptography in credentials being developed by the Fast IDentity Online (FIDO) Alliance industry coalition and the Worldwide Web Consortium (W3C) organization. Currently, the Web Authentication spec is at the W3C's "Candidate Recommendation" stage, meaning that it's considered stable and is one step away from being a W3C "Recommendation" and ready for implementation.

The aim of the spec is to move away from using passwords for user authentications, which is conceived as problematic because passwords are subject to information disclosure and phishing attacks. Instead, user identities get verified by a fingerprint reader, a face scan or a personal ID number. A so-called FIDO 2.0 "companion device" may be used in the process, such as a wristband with near-field communication capabilities, a card swipe or a USB drive.

Microsoft currently supports the Web Authentication spec in build 17723 or higher of the Edge browser, which can be tested by Windows Insider Program participants. Microsoft also added FIDO 2.0 support in its Windows Hello biometric sign-in capability, which was released in the Window 10 April 2018 (version 1803) release. The Windows Hello capability is designed to work with Azure Active Directory-joined devices.

Microsoft indicated in its announcement that it is "working with industry partners on lighting up the first passwordless experiences around the web" with the Edge browser preview of the Web Authentication spec. However, other browser makers may already be at the same stage.

For instance, Google has already implemented the Web Authentication spec in its Chrome browser version 67, according to its status documentation. Mozilla also supports the Web Authentication spec in its Firefox browser version 60, according to its documentation, although it's described as being "experimental technology."

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.
Fallout from Microsoft's 'Midnight Blizzard' Saga Hits Feds

When the Russian attack group Midnight Blizzard successfully breached Microsoft corporate e-mail accounts late last year, it apparently managed to steal U.S. government agency e-mails, too.
PowerShell Script Used in Phishing Attack May Be AI-Generated

A PowerShell script being used in a novel malware campaign may have been created by AI, according to security researchers at Proofpoint.
Using Microsoft Office to Build a Network Diagram, Part 1

Keeping documentation is a great way to ease your future hardware refresh and have what you need for insurance purposes.
Microsoft Claims Breakthrough in Quantum Computing Reliability

A new paper details Microsoft's recent progress in quantum computing -- specifically, its development of a system that is both significantly less prone to errors and better at correcting them.