Confirmed users
651
edits
Security/QA/TestPlans/Web Authentication: Difference between revisions
Jump to navigation
Jump to search
m
Security/QA/TestPlans/Web Authentication (view source)
Revision as of 21:36, 4 October 2017
, 4 October 2017Intro
Mwobensmith (talk | contribs) m (Terminology error) |
Mwobensmith (talk | contribs) m (Intro) |
||
| Line 28: | Line 28: | ||
= Overview = | = Overview = | ||
== Purpose == | == Purpose == | ||
Web Authentication is the proposed W3C standard for creating an interface to validate a local, crytographically-signed message, with the purpose of enhancing a user's login credentials. | |||
What this means in simple language - for Firefox - is the ability for a user to employ a USB token during a login process as another factor of authentication, on top of typical methods, such as a password. | |||
The browser is the broker between a supporting web site and the USB device. The site implements the feature in JavaScript, which is the focus of the W3C spec. Firefox also implements a new USB interface for interacting with these hardware tokens, which is tangential to our implementation. | |||
We are interested in testing both JS API and USB support. In addition, we are most concerned with integration scenarios, which often surface the most bugs and problems encountered by everyday Firefox users. | |||
Currently, this feature is slated for Firefox 58, but that could change depending on the status of the W3C spec. Regardless, the vast majority of this feature's test requirements is captured here. | |||
The goal set forth in this document is to outline a test strategy that will be implemented up until the feature has been shipped in a major release of Firefox. At that point, it is hoped that our QA team can run the suite of manual test cases as part of their build certification passes. | |||
== Scope == | == Scope == | ||