Passkeys that use the WebAuthn PRF extension now work in Bramble, and their PRF secrets are preserved when importing, storing, or exchanging credentials. Fastmail Masked Email is now available as an alias provider.
- Proton Pass imports now include files, every website, and passkeys, and preserve Proton Pass passkeys' PRF secrets.
- 1Password exports now bring their files across.
- When viewing a login, its websites are grouped under one label, and websites saved without a scheme are read as https.
- A save that is stuck now reports what it is waiting on, and a breach check that never answers no longer blocks saving.
- Passkey requests in the extension are bound to the page that made them, and the extension verifies the user before claiming a passkey.
All changes (26)
Features
- group a login's websites under one label in its view mode
- count attachments in the preview's summary line
- bring Proton Pass files and every website across (#166)
- bring a 1Password export's files across
- carry passkey PRF secrets and other FIDO2 extension data through credential exchange
- keep Proton Pass passkeys' PRF secrets
- carry the prf extension through the Firefox in-page provider
- answer the WebAuthn prf extension from the passkey provider
- carry PRF secrets through the TS crypto surface and the stored passkey
- mint PRF secrets and evaluate the WebAuthn prf extension in the core
- Fastmail Masked Email (#133)
- bring Proton Pass passkeys across (#166)
Bug Fixes
- stop a breach check that never answers from holding a save
- say when a save is stuck, and what it is waiting on
- refuse a joiner whose roster id belongs to another device
- bound relay-forward reassembly before allocating for a frame
- carry an HLC counter past its limit into the wall instead of throwing
- keep a KeePass file on a login pinned to its port
- validate stored PRF secrets and cap credential-exchange and zip imports
- verify the user for real before claiming it in the extension
- harden the extension's passkey ceremony
- bind each request to the page that made it, not the focused tab
- make the Firefox toolbar icon follow the theme in the Extensions panel
- use a passkey's rpId when a transfer has no website
- read a website saved without a scheme as https
Refactors
- fold the duplicated ceremony and request plumbing
Full Changelog: 1.32.0-firefox...1.33.0-firefox