Does enabling webauth to use my yubikey to login to sites when using the browser make my fingerprint so unique as to defeat the purpose of using the browser?
https://github.com/mullvad/mullvad-browser/issues/53#issuecomment-1725695207
Just to make this entirely clear: Enabling
security.webauth.webauthn
manually is indeed fingerprintable:
If it’s enablednavigator.credentials
(and some classes onwindow
) will be set which are otherwiseundefined
.
It is fingerprintable, yes. This is one of the reasons we recommend using a browser like Firefox for trusted websites which you log in to, and Mullvad Browser for other browsing.