247344 2022-11-01 16:33:51 -0700 [WebAuthn] Incorrect RP ID hash when using U2F keys 2023-11-02 02:14:43 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified NEW InRadar P1 Major --- 1 pascoe pascoe gianluca.varisco joost.vandijk webkit-bug-importer oldest_to_newest 1909665 0 pascoe 2022-11-01 16:33:51 -0700 This causes registrations to fail whenever we fall back to U2F or the key only supports U2F. 1909666 1 pascoe 2022-11-01 16:34:00 -0700 rdar://100466116 1910307 2 joost.vandijk 2022-11-04 02:00:09 -0700 To reproduce: Point your browser at https://demo.yubico.com/webauthn-technical/registration and use your U2F security key to register a FIDO credential. When the RP ID Hash mismatch occurs, you will get an error message: Wrong RP ID hash in response. OR Point your browser at https://webauthn.io/ and click Advanced Settings. In the Registration Settings, Uncheck "Require User Verification" and select "Cross-Platform" as Authenticator Attachment. Then click "Register" and use your U2F security key to register a FIDO credential. When the RP ID Hash mismatch occurs, you will get an error message: Registration failed: Unexpected RP ID hash. 1914978 3 pascoe 2022-11-28 08:07:28 -0800 rdar://102718464 1914981 4 pascoe 2022-11-28 08:17:06 -0800 Pull request: https://github.com/WebKit/WebKit/pull/6862 1915031 5 pascoe 2022-11-28 10:51:56 -0800 rdar://100466116 1989370 6 joost.vandijk 2023-11-02 02:14:43 -0700 Seems to be resolved with Safari 17.1