Weekend project: WebAuthn support for typage, to symmetrically encrypt age files with passkeys and FIDO2 tokens, using the prf extension.

Filippo Valsorda :go:

The browser side already works with both iCloud Keychain / Touch ID and YubiKeys (resident and not, with strong hardware binding). Just 200 lines!!

https://github.com/FiloSottile/typage/pull/28/files#diff-d409b33bacccec961f878c5b785d2ba1916e0976b9cbd192f9cb7cd2967a7dc0

Next, a CLI plugin to use the same credentials from outside the browser.

Erin 💽✨

@filippo The PRF extension saddens me so much because its so close yet so far. If it handed over the PRF secret at enrollment time it would be perfect for so many things. Alas

But it does work for local entirely local encryption tasks like this.