Safari support is incoming: Release Notes for Safari Technology Preview 71 | WebKit
I think it’s worthwhile to point out people don’t need to buy a physical security key to use WebAuthn:
- Chrome desktop allows the use of Macbook fingerprint scanner to log in
- Chrome Android can use fingerprint and screen lock pattern/PIN to authenticate
- MS Edge can use Windows Hello face and fingerprint scanners
I expect Apple to include TouchID/FaceID in the final version of Safari - and that these platform authenticators will be much more attractive for end-users than a roaming authenticator (Yubikey and the like).
FWIW I’ve played around with this gem: GitHub - cedarcode/webauthn-ruby: WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party · GitHub