Arnar Birgisson

SWE @ Google. Identity, authentication, FIDO, W3C Webauthn.

[Arnar Birgisson @arnarbi]

@__b_c @samuelgoto @aaronpk To connect the dots, DBSC is what we discussed in a small group in the hallway at Identiverse in ‘22 when I was asking questions whether DPoP fit what we were trying to do. (I think maybe you were on VC). It just didn’t have a name then.

Happy to chat about it any time!

[Arnar Birgisson @arnarbi]

PSA: If you're implementing passkeys on your website, make sure to set authenticatorSelection.residentKey to "preferred" or "required" for the create call.

Otherwise credentials on Android will be neither discoverable nor managed by a password manager.

[Christiaan Brand @christiaanbrand]

Good news if you have a Google Workspace account: https://t.co/JEsYU1l0Yw

[Christiaan Brand @christiaanbrand]

Great deep(er) dive on Google's passkey implementation by @dangoodin001 from @arstechnica this morning. https://t.co/aduDNugYmd

[Sundar Pichai @sundarpichai]

We've started rolling out support for passkeys that let users sign in to our products with a fingerprint, a face scan or a screen lock PIN. Starting today, this will be available as an option for Google Account users.
https://t.co/wBSIqAfiCe

[Arnar Birgisson @arnarbi]

So long passwords, thanks for all the phish!
#passkeys for Google accounts are here.

https://t.co/a5SiwpiEL1

[Arnar Birgisson @arnarbi]

Yikes

[Arnar Birgisson @arnarbi]

@codekaiju @1Password Congrats, and excellent news!

[Arnar Birgisson @arnarbi]

@IAmKale @vercel @gudmundur

[David Kleidermacher @DaveKSecure]

Check out Google's expanded help for Ukraine, including security + counter-disinfo infrastructure and services @google https://t.co/wDrqPUkPvo

[Arnar Birgisson @arnarbi]

@BrianG416 … you can see and manage them on Android under Settings > Passwords & Accounts > Google. Management on https://t.co/xS8MCTYZy2 and support for native apps on Android is coming next year. (2/2)

[Arnar Birgisson @arnarbi]

@BrianG416 Hi! You already can in the following scenarios: You can create and use them on supporting websites when viewed with Chrome on Android; you can use passkeys from your Android device by selecting “Use passkey from a different device” on Safari and desktop Chrome; and… (1/2)

[Arnar Birgisson @arnarbi]

@__apf__ I generally tip regardless of what it is for. But I hate it because eventually it all goes to the employer, as tips allow them to compete for labor with lower wages than a non-tipping job.

[Arnar Birgisson @arnarbi]

@__apf__ This is for coffees & pastries to go 😢

[Arnar Birgisson @arnarbi]

@SusanPotter @donsbot Sankey diagram is another name for it.

[Arnar Birgisson @arnarbi]

@IAmKale I didn’t know! Happy birthday!

[Arnar Birgisson @arnarbi]

@rmondello Yes! Not exactly rain, but this takes me back home: https://t.co/NWHYx3yitK (that website is full of other gems)

[Arnar Birgisson @arnarbi]

@FlxMgdnz @nsatragno Ok they actually aren’t, that’s our bad. We’ll fix this asap.

[Arnar Birgisson @arnarbi]

@FlxMgdnz @nsatragno They should be there in the Android settings view, under "Passwords & Accounts" and "Google".