Passkeys now support the WebAuthn PRF extension, and PRF secrets carry through credential exchange and Proton Pass import.
- Proton Pass imports now include files, passkeys, and every website; 1Password imports now include files; and the import preview summary counts attachments.
- A save is no longer blocked by a breach check that never responds, and the app tells you when a save is stuck and what it is waiting on.
- Passkey requests in the extension are bound to the page that made them, and the user is verified before a passkey is claimed.
- Fastmail Masked Email is now available for aliases.
- A joining device is refused if its roster ID is already used by another device.
All changes (26)
Features
- group a login's websites under one label in its view mode
- count attachments in the preview's summary line
- bring Proton Pass files and every website across (#166)
- bring a 1Password export's files across
- carry passkey PRF secrets and other FIDO2 extension data through credential exchange
- keep Proton Pass passkeys' PRF secrets
- carry the prf extension through the Firefox in-page provider
- answer the WebAuthn prf extension from the passkey provider
- carry PRF secrets through the TS crypto surface and the stored passkey
- mint PRF secrets and evaluate the WebAuthn prf extension in the core
- Fastmail Masked Email (#133)
- bring Proton Pass passkeys across (#166)
Bug Fixes
- stop a breach check that never answers from holding a save
- say when a save is stuck, and what it is waiting on
- refuse a joiner whose roster id belongs to another device
- bound relay-forward reassembly before allocating for a frame
- carry an HLC counter past its limit into the wall instead of throwing
- keep a KeePass file on a login pinned to its port
- validate stored PRF secrets and cap credential-exchange and zip imports
- verify the user for real before claiming it in the extension
- harden the extension's passkey ceremony
- bind each request to the page that made it, not the focused tab
- make the Firefox toolbar icon follow the theme in the Extensions panel
- use a passkey's rpId when a transfer has no website
- read a website saved without a scheme as https
Refactors
- fold the duplicated ceremony and request plumbing
Full Changelog: 1.35.0-chromium...1.36.0-chromium