imported>Jimmy-bot：机器人: 尚未清空的已重定向分类）（Cat:認證方法→Cat:身份验证方法

2025-12-07T11:25:10Z

新页面

{{Expand language|1=en|time=2022-05-06T07:39:28+00:00}}
{{Infobox technology standard
| title = Web Authentication
| image =
| caption =
| year_started =
| first_published = {{Start date|2016|05|31|df=y}}
| version = Level 2 Recommendation
| version_date = {{Start date|2021|04|21|df=y}}
| organization = FIDO2專案（[[FIDO聯盟]]和[[World Wide Web Consortium|W3C]]）
| editors = {{Collapsible list|title=現任編輯
|Jeff Hodges (Google)
|J.C. Jones (Mozilla)
|Michael B. Jones (Microsoft)
|Akshay Kumar (Microsoft)
|Emil Lundberg (Yubico)
}}
| domain = [[身份驗證]]
| committee = {{le|Web Authentication Working Group}}
| abbreviation = WebAuthn
| preview = Level 3 ({{abbr|FPWD|First Public Working Draft}})
| preview_date = {{Start date|2021|12|15|df=y}}
| base_standards = {{Plainlist|
* {{le|File API|HTML5 File API}}
* WHATWG編碼標準
* Unicode AUX #29：[[文本分割]]
}}
}}
'''Web Authentication'''（'''WebAuthn'''）是由[[万维网联盟]]發布的[[網頁標準]]<ref name="W3C-WebAuthn">{{cite web |editor1-last=Balfanz |editor1-first=Dirk |editor2-last=Czeskis |editor2-first=Alexei |editor3-last=Hodges |editor3-first=Jeff |editor4-last=Jones |editor4-first=J.C. |editor5-last=Jones |editor5-first=Michael B. |editor6-last=Kumar |editor6-first=Akshay |editor7-last=Liao |editor7-first=Angelo |editor8-last=Lindemann |editor8-first=Rolf |editor9-last=Lundberg |editor9-first=Emil |title=Web Authentication: An API for accessing Public Key Credentials Level 1 |url=https://www.w3.org/TR/webauthn-1/ |publisher=[[万维网联盟]] (W3C) |access-date=4 March 2019 |publication-date=4 March 2019 |edition=Recommendation |archive-date=2019-03-14 |archive-url=https://web.archive.org/web/20190314015005/https://www.w3.org/TR/webauthn-1/ }}</ref><ref>{{cite web |url=https://www.w3.org/blog/webauthn/ |title=Web Authentication Working Group |publisher=[[万维网联盟]] (W3C) |access-date=2018-05-11 |archive-date=2016-05-15 |archive-url=https://web.archive.org/web/20160515104033/https://www.w3.org/blog/webauthn/ }}</ref><ref>{{cite episode |title=What is WebAuthn |series=TechStuff |publisher=[[清晰頻道通信公司]] |series-link=HowStuffWorks#TechStuff |first=Jonathan |last=Strickland |date=18 March 2019 |url=https://www.iheart.com/podcast/105-techstuff-26941194/episode/what-is-webauthn-30705004/ |minutes=20:35 |access-date=20 March 2019 |archive-date=2021-06-25 |archive-url=https://web.archive.org/web/20210625115545/https://www.iheart.com/podcast/105-techstuff-26941194/episode/what-is-webauthn-30705004/ }}</ref>。該標準定義了一個標準Web [[应用程序接口|API]]，用户可以通過這個API在Web上进行安全认证。它通过使用数字签名验证用户身份，解决了许多基于密码的传统身份验证问题 <ref>{{Cite web |title=A Tour of WebAuthn |url=https://www.imperialviolet.org/tourofwebauthn/tourofwebauthn.html |date=2024-12-23 |language=en |last=Langley |first=Adam |access-date=2025-07-22}}</ref>。[[Google]]、[[微软|Microsoft]]以及[[Mozilla基金會|Mozilla]]均在其研發的浏览器中支持WebAuthn标准<ref>{{cite news |title=在全球实现更简单更强大的Web认证方式 |url=https://www.chinaw3c.org/2018-04-pressrelease-webauthn-fido2.html |publisher=w3c中國 |accessdate=2021-03-04 |archive-date=2019-03-14 |archive-url=https://web.archive.org/web/20190314073401/http://www.chinaw3c.org/2018-04-pressrelease-webauthn-fido2.html }}</ref>。WebAuthn支援不同類型的[[憑證]]，其中同步可發現憑證（{{langx|en|synced discoverable credentials}}，也稱為[[通行密鑰]]<ref>{{cite web |title=White Paper: Multi-Device FIDO Credentials |url=https://fidoalliance.org/wp-content/uploads/2022/03/How-FIDO-Addresses-a-Full-Range-of-Use-Cases-March24.pdf |publisher=[[FIDO Alliance]] |access-date=2024-05-20 |page=6 |date=2022-03}}</ref>）是最常見的。WebAuthn 经常被吹捧为完全取代密码，即彻底消除了对密码的需求。然而，大多数支持 WebAuthn 的网站仍然以某种方式使用密码。<ref>{{Cite web |title=Passkey technology is elegant, but it's most definitely not usable security |url=https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/ |language=en |last=Goodin |first=Dan |url-status=live |access-date=2025-07-22 |via=}}</ref>

== 參見 ==
*[[FIDO聯盟]]
*[[ssh-keygen]]

== 參考資料 ==
{{Reflist|2}}

== 外部連結 ==
*[https://www.w3.org/TR/webauthn/ Web Authentication: An API for accessing Public Key Credentials Level 1] {{Wayback|url=https://www.w3.org/TR/webauthn/ |date=20201203050738 }}
*[https://www.w3.org/Webauthn/ Web Authentication Working Group] {{Wayback|url=https://www.w3.org/Webauthn/ |date=20201210031456 }}
*[https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API Web Authentication API on MDN] {{Wayback|url=https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API |date=20201128172824 }}
*[https://github.com/herrjemand/awesome-webauthn WebAuthn Awesome] {{Wayback|url=https://github.com/herrjemand/awesome-webauthn |date=20201101104804 }}
{{Web interfaces}}
[[Category:身份验证方法]]
[[Category:識別]]
[[Category:W3C标准]]
[[Category:互联网安全]]
[[Category:網頁技術]]

WebAuthn - 版本历史

imported>Jimmy-bot：​机器人: 尚未清空的已重定向分类） （Cat:認證方法→Cat:身份验证方法

imported>Jimmy-bot：机器人: 尚未清空的已重定向分类）（Cat:認證方法→Cat:身份验证方法