Updated terms, and added additional description.

This commit is contained in:
Ackermann Yuriy 2021-11-20 21:39:15 +02:00 committed by GitHub
parent d5c387cfa5
commit 3b2b437b51
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,13 +1,15 @@
## WebAuthn - authenticating users to services using public key cryptography ## WebAuthn - authenticating users to services using public key cryptography
WebAuthn is a web standard published by the W3C. Its goal is to WebAuthn is a web standard published by the W3C. Its goal is to
standardize an interfacefor authenticating users to web-based standardize an interface for authenticating users to web-based
applications and services using public key cryptography. Modern web applications and services using public key cryptography. Modern web
browsers support WebAuthn functionality. browsers support WebAuthn functionality.
WebAuthn provides two funcitons: register and authenticate. Usually the WebAuthn provides two funcitons: register and authenticate. Usually the
public and private keypair is stored on an external token (Yuikey etc.) public-private keypair is stored on an external device, called security key
or part of the platform (TPM). After the public key is registered, it can (Yubikey, Trustkey etc.) or inside a platform(OS) authenticator. Platform
authenticators are available on all modern platforms, such as Windows, Mac,
Android and iOS. After the public key is registered, it can
be used to authenticate to the same service. be used to authenticate to the same service.
This module does not preserve a database of registered public keys, their This module does not preserve a database of registered public keys, their