[macOS Safari 13 Extension] Registration on Google fails

[jackdorland]

Hello! It seems when trying to register my Krypton "security key" with Google, it just replies "Remove your security key and try again."

Any insight on what happened?

[agrinman]

Confirmed this is an issue. Work around: register your key on chrome/firefox, and then it will work in safari for authentication.

Long term, Google doesn't allow u2f registration on safari -- they enforce webauthn only which may need adjustments on the krypton mobile app.

[agrinman]

Does anyone have a hardware u2f/fido2 key that can test registration on Google? I have a hunch that registration is broken of Safari for any security key...

[jackdorland]

I am planning to get one soon... however your workaround worked perfectly. I’ll check back in a while when I make the purchase to see if you still need help.

[agrinman]

I have many, just they are not with me currently :/

[agrinman]

Pretty sure this is a google thing, https://webauthndemo.appspot.com works fine for me (it's a demo built by google). Curious if the hardware token works...

[lumaxis]

@agrinman I just tested key registration with my Solo key in Safari and it worked just fine.

[agrinman]

@lumaxis you tested registration right?

[lumaxis]

Yes, sorry. Realized that my comment is a bit ambiguous just after posting. Edited it for clarity 🙂

[agrinman]

Ok thanks, that’s good then! Hopefully they’re not blocking because of something like attestation. Will debug further!

[mkexc]

Ok thanks, that’s good then! Hopefully they’re not blocking because of something like attestation. Will debug further!

Any updates on this? I have this bug too.

[agrinman]

Not yet...still an open issue as to why this is happening. In the mean time, I'd suggest registering your krypton key on the chrome browser. Authentication works just fine on Safari.