Web browsers to do away with users’ passwords

A new authentication standard being pushed by Mozilla and Google may one day make passwords obsolete.

Dubbed Web Authentication or WebAuthn, this new open standard for web authentication relies on biometrics (fingerprints, facial recognition) and USB tokens to secure users’ multiple web accounts, according to a statement from the Fast IDentity Online (FIDO) Alliance.

USB tokens are like master keys. They are physical devices that hold electronic information to identify a user without the use of passwords.

WebAuthn is currently available for Firefox users in the browser’s latest version. Chrome and Edge will adopt WebAuthn in upcoming software updates in the next few months. One of the benefits in doing away with passwords is security against phishing attacks. Since there is no string of characters to decode and exploit like in passwords, a user’s electronic identity becomes more secure.

“While there are many web security problems and we can’t fix them all, relying on passwords is one of the weakest links,” said W3C CEO Jeff Jaffe.

This new standard was made possible by the combined efforts of the FIDO Alliance and World Wide Web Consortium (W3C). FIDO specializes in finding a universal way for users to access devices and services without having to remember multiple usernames and passwords.

Meanwhile, W3C is an international community where member organizations, in-house staff and the public work together to develop Web standards.

The open standard nature of WebAuthn means more developers will have access to it. This will help hasten the implementation of WebAuthn across the internet.

Until WebAuthn becomes the preferred method of keeping online accounts secure, Firefox, Chrome and Edge users will at least have the option to sync all their information in a unique fingerprint, face or USB token.  /ra

source: technology.inquirer.net

Mozilla pushes Firefox fuddy-duddies toward the future

Mozilla has begun notifying Firefox 3.6 users that now is a good time to upgrade to Firefox 8.0.1--and to the browser's new fast-moving ethos.

The change had been planned for at least two other occasions in recent weeks, but Mozilla postponed it. But yesterday, Mozilla flipped the switch so that when Firefox 3.6 checks with a server to find out if there's an update, it'll find the newest version of the browser.

"It's live, and users should see an update in the next 24 hours," said spokeswoman Erica Jostedt. Mozilla has a Web page for users to check if they have the latest Firefox version.

Mozilla released Firefox 3.6 in January 2010. After Firefox 4 a year later, Mozilla moved to a rapid-release philosophy in which new versions of the browser come every six weeks with smaller changes.

Firefox 8 is the most widely used version of Mozilla's browser, accounting for 7.3 percent of personal-computer browser usage in November, according to statistics from Net Applications. Firefox 3.6 is next, with 5.3 percent, so a lot more people likely will get on the rapid-release train now.

Firefox is in a competitive race, primarily right now with Chrome. Google's browser is in third place but closing the gap with Firefox.

The rapid-release plan, modeled on the same practice Google adopted with Chrome, lets Firefox deliver new features without browser users having to wait a year or more for a new major version. It's irked some people, particularly business customers, who don't want a fast-moving product, so Mozilla is working on a slower-release plan, too.

The rapid-release update process also produces a lot of intrusive notifications for Windows users. Mozilla is working to ease that annoyance with silent updates.

source: http://news.cnet.com/8301-30685_3-57335365-264/mozilla-pushes-firefox-fuddy-duddies-toward-the-future/?tag=mncol