{"id":11163,"date":"2022-07-22T11:12:54","date_gmt":"2022-07-22T05:12:54","guid":{"rendered":"https:\/\/dtasiagroup.com\/?p=11163"},"modified":"2022-07-22T11:12:54","modified_gmt":"2022-07-22T05:12:54","slug":"hoi-dap-ve-yubikey-passkeys","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/hoi-dap-ve-yubikey-passkeys\/","title":{"rendered":"H\u1ecfi \u0111\u00e1p v\u1ec1 YubiKey passkeys"},"content":{"rendered":"

V\u00e0o th\u00e1ng 3\/2022, Yubico \u0111\u00e3 xu\u1ea5t b\u1ea3n m\u1ed9t b\u00e0i vi\u1ebft c\u00f3 t\u00ean \u201cYubiKeys, passkey v\u00e0 t\u01b0\u01a1ng lai c\u1ee7a x\u00e1c th\u1ef1c hi\u1ec7n \u0111\u1ea1i\u201d tr\u00ean trang blog c\u1ee7a h\u00e3ng, xem x\u00e9t s\u1ef1 ph\u00e1t tri\u1ec3n c\u1ee7a x\u00e1c th\u1ef1c t\u1eeb khi h\u1ecd gi\u1edbi thi\u1ec7u YubiKey v\u00e0o n\u0103m 2008, khi l\u0129nh v\u1ef1c c\u00f4ng ngh\u1ec7 \u0111ang h\u01b0\u1edbng t\u1edbi vi\u1ec7c \u00e1p d\u1ee5ng v\u00e0 th\u00edch \u1ee9ng v\u1edbi x\u00e1c th\u1ef1c WebAuthn\/FIDO.<\/p>\n

Trong th\u00e1ng tr\u01b0\u1edbc, m\u1ed9t s\u1ed1 tin t\u1ee9c v\u1ec1 \u201cpasskey – kh\u00f3a m\u1eadt kh\u1ea9u\u201d \u0111\u00e3 g\u00e2y ra m\u1ed9t s\u1ed1 s\u1ef1 ph\u1ea5n kh\u00edch, c\u0169ng nh\u01b0 m\u1ed9t s\u1ed1 nh\u1ea7m l\u1eabn, v\u1ec1 nh\u1eefng g\u00ec Yubico – v\u1edbi t\u01b0 c\u00e1ch l\u00e0 nh\u00e0 cung c\u1ea5p v\u00e0 d\u1eabn d\u1eaft c\u00e1c ti\u00eau chu\u1ea9n x\u00e1c th\u1ef1c – \u0111ang l\u00e0m, v\u01b0\u1ee3t ra ngo\u00e0i l\u0129nh v\u1ef1c m\u1eadt kh\u1ea9u.<\/p>\n

Yubico \u0111\u00e3 nh\u1eadn \u0111\u01b0\u1ee3c nhi\u1ec1u c\u00e2u h\u1ecfi t\u1eeb ph\u00eda kh\u00e1ch h\u00e0ng v\u00e0 \u0111\u1ed1i t\u00e1c \u0111\u1ec3 l\u00e0m r\u00f5 th\u00eam v\u1ec1 passkey. C\u00e1c c\u00e2u h\u1ecfi v\u00e0 gi\u1ea3i \u0111\u00e1p \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt t\u1ea1i blog c\u1ee7a Yubico v\u00e0 Webinar s\u1eafp t\u1edbi c\u1ee7a h\u1ecd, t\u1eadp trung v\u00e0o passkey v\u00e0 x\u00e1c th\u1ef1c hi\u1ec7n t\u1ea1i.<\/p>\n

D\u01b0\u1edbi \u0111\u00e2y l\u00e0 ph\u1ea7n h\u1ecfi \u0111\u00e1p \u0111\u01b0\u1ee3c \u0111\u0103ng t\u1ea3i tr\u00ean blog:<\/p>\n

\"\"<\/p>\n

Q: Passkey l\u00e0 g\u00ec?<\/b><\/strong><\/p>\n

Passkey c\u0169ng gi\u1ed1ng nh\u01b0 m\u1eadt kh\u1ea9u, nh\u01b0ng t\u1ed1t h\u01a1n m\u1eadt kh\u1ea9u v\u00ec ch\u00fang kh\u00f4ng \u0111\u01b0\u1ee3c t\u1ea1o ra m\u1ed9t c\u00e1ch thi\u1ebfu an to\u00e0n b\u1edfi con ng\u01b0\u1eddi. Passkey s\u1eed d\u1ee5ng m\u1eadt m\u00e3 kh\u00f3a c\u00f4ng khai \u0111\u1ec3 t\u1ea1o ra nh\u1eefng tr\u1ea3i nghi\u1ec7m an to\u00e0n h\u01a1n nhi\u1ec1u.<\/p>\n

Tuy nhi\u00ean, passkey kh\u00f4ng ph\u1ea3i l\u00e0 m\u1ed9t kh\u00e1i ni\u1ec7m m\u1edbi. \u0110\u00f3 ch\u1ec9 l\u00e0 t\u00ean g\u1ecdi m\u1edbi \u0111\u01b0\u1ee3c d\u00f9ng cho c\u00e1c th\u00f4ng tin \u0111\u0103ng nh\u1eadp WebAuthn\/FIDO2 mang \u0111\u1ebfn nh\u1eefng tr\u1ea3i nghi\u1ec7m \u0111\u1ea7y \u0111\u1ee7 c\u1ee7a vi\u1ec7c kh\u00f4ng d\u00f9ng m\u1eadt kh\u1ea9u. C\u00e1c ki\u1ec3u th\u00f4ng tin \u0111\u0103ng nh\u1eadp n\u00e0y c\u00f2n \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u00f3 th\u1ec3 kh\u00e1m ph\u00e1 ho\u1eb7c th\u00f4ng tin \u0111\u0103ng nh\u1eadp th\u01b0\u1eddng tr\u00fa.<\/p>\n

C\u00e1c chuy\u00ean gia t\u1ea1i Yubico th\u00edch thu\u1eadt ng\u1eef m\u1edbi n\u00e0y v\u00e0 s\u1eed d\u1ee5ng n\u00f3 v\u00ec n\u00f3 kh\u00e1 \u0111\u01a1n gi\u1ea3n, gi\u00fap cho m\u1ecdi ng\u01b0\u1eddi hi\u1ec3u \u0111\u01b0\u1ee3c \u0111\u00e2y l\u00e0 ph\u01b0\u01a1ng ph\u00e1p thay th\u1ebf cho m\u1eadt kh\u1ea9u. “Passkey” d\u1ec5 hi\u1ec3u h\u01a1n nhi\u1ec1u so v\u1edbi “th\u00f4ng tin \u0111\u0103ng nh\u1eadp WebAuthn\/FIDO c\u00f3 th\u1ec3 kh\u00e1m ph\u00e1”.<\/p>\n

L\u1ea7n \u0111\u1ea7u ti\u00ean thu\u1eadt ng\u1eef passkey \u0111\u01b0\u1ee3c \u0111\u1ec1 c\u1eadp \u0111\u1ebfn c\u1ed9ng \u0111\u1ed3ng l\u00e0 v\u00e0o n\u0103m ngo\u00e1i b\u1edfi Apple t\u1ea1i m\u1ed9t cu\u1ed9c n\u00f3i chuy\u1ec7n WWDC2021, n\u01a1i h\u1ecd \u0111\u00e3 gi\u1edbi thi\u1ec7u b\u1ea3n xem tr\u01b0\u1edbc c\u00f4ng ngh\u1ec7 \u201cPasskeys trong iCloud Keychain\u201d cho c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n.<\/p>\n

Passkey khi \u0111\u00f3 ch\u1ec9 \u0111\u1ec1 c\u1eadp \u0111\u1ebfn th\u00f4ng tin x\u00e1c th\u1ef1c WebAuthn\/FIDO ch\u1ee9 kh\u00f4ng ph\u1ea3i nhi\u1ec1u kh\u00f3a v\u00e0 giao th\u1ee9c kh\u00e1c, ch\u1eb3ng h\u1ea1n nh\u01b0 PIV, OTP ho\u1eb7c Th\u1ebb OpenPGP, c\u00f3 s\u1eb5n trong YubiKey 5 Series.<\/p>\n

\u00a0<\/b><\/strong>Q: T\u1ea1i sao thu\u1eadt ng\u1eef passkey g\u1ea7n \u0111\u00e2y xu\u1ea5t hi\u1ec7n nhi\u1ec1u trong c\u00e1c b\u1ea3n tin?<\/b><\/strong><\/p>\n

C\u00e1c nh\u00e0 cung c\u1ea5p n\u1ec1n t\u1ea3ng nh\u01b0 Apple, Google v\u00e0 Microsoft, \u0111\u00e3 b\u1eaft \u0111\u1ea7u chuy\u1ec3n sang h\u1ed7 tr\u1ee3 cho tr\u1ea3i nghi\u1ec7m ho\u00e0n to\u00e0n kh\u00f4ng c\u1ea7n m\u1eadt kh\u1ea9u b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng tr\u00ecnh x\u00e1c th\u1ef1c b\u00ean ngo\u00e0i nh\u01b0 YubiKeys, v\u00e0 c\u0169ng s\u1eed d\u1ee5ng ph\u1ea7n c\u1ee9ng t\u1eadp trung v\u00e0o b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p trong thi\u1ebft b\u1ecb c\u1ee7a h\u1ecd nh\u01b0 TPM, k\u1ec3 t\u1eeb \u0111\u1ea7u n\u0103m 2019.<\/p>\n

M\u1ed9t s\u1ed1 c\u00f4ng vi\u1ec7c t\u00edch h\u1ee3p h\u1ed7 tr\u1ee3 v\u1eabn \u0111ang di\u1ec5n ra, nh\u01b0ng c\u00e1c n\u1ec1n t\u1ea3ng d\u01b0\u1eddng nh\u01b0 \u0111ang ti\u1ebfn g\u1ea7n h\u01a1n v\u00e0 \u0111\u00e3 c\u00f3 nh\u1eefng t\u00edn hi\u1ec7u c\u00f4ng khai \u00fd \u0111\u1ecbnh ho\u00e0n to\u00e0n h\u1ed7 tr\u1ee3, th\u00eam m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng v\u00e0 ti\u1ebfp t\u1ee5c s\u1ef1 cam k\u1ebft c\u1ee7a h\u1ecd \u0111\u1ed1i v\u1edbi c\u00e1c c\u01a1 quan ti\u00eau chu\u1ea9n nh\u01b0 W3C v\u00e0 FIDO.<\/p>\n

Ch\u00fang t\u00f4i hy v\u1ecdng s\u1ebd th\u1ea5y nhi\u1ec1u h\u01a1n n\u1eefa v\u1ec1 passkey trong c\u00e1c b\u1ea3n tin sau khi vi\u1ec7c tri\u1ec3n khai \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n v\u00e0 ph\u00e1t tri\u1ec3n trong m\u1ed9t ho\u1eb7c hai n\u0103m t\u1edbi.<\/p>\n

\u00a0<\/b><\/strong>Q: Nh\u1eefng thay \u0111\u1ed5i b\u1ed5 sung n\u00e0o li\u00ean quan \u0111\u1ebfn passkey \u0111ang \u0111\u01b0\u1ee3c th\u1ea3o lu\u1eadn?<\/b><\/strong><\/p>\n

\u1ede c\u1ea5p \u0111\u1ed9 cao nh\u1ea5t, s\u1ebd c\u00f3 hai \u0111i\u1ec1u m\u1edbi \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng d\u1ecbch v\u1ee5 v\u00e0 s\u1ef1 ch\u1ea5p nh\u1eadn c\u1ee7a ng\u01b0\u1eddi ti\u00eau d\u00f9ng \u0111\u1ed1i v\u1edbi WebAuthn \/ FIDO:<\/p>\n

    \n
  1. C\u00f3 th\u1ec3 s\u1eed d\u1ee5ng \u0111i\u1ec7n tho\u1ea1i Android v\u00e0 iOS c\u00f3 passkey, ch\u1ee7 y\u1ebfu th\u00f4ng qua bluetooth v\u00e0 internet, \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0o c\u00e1c thi\u1ebft b\u1ecb kh\u00e1c nh\u01b0 m\u00e1y t\u00ednh x\u00e1ch tay. \u0110i\u1ec1u n\u00e0y th\u1eadt th\u00fa v\u1ecb v\u00e0 lu\u00f4n l\u00e0 m\u1ed9t ph\u1ea7n trong t\u1ea7m nh\u00ecn c\u1ee7a Yubico \u0111\u1ed1i v\u1edbi c\u00e1c giao th\u1ee9c m\u00e0 ch\u00fang t\u00f4i \u0111\u00e3 n\u1ed7 l\u1ef1c t\u1ea1o ra v\u00e0 ph\u00e1t tri\u1ec3n.
    \nYubico \u0111\u00e3 gi\u00fap t\u1ea1o ra ph\u01b0\u01a1ng ti\u1ec7n bluetooth FIDO ban \u0111\u1ea7u v\u00e0 th\u1eadm ch\u00ed c\u00f2n x\u00e2y d\u1ef1ng m\u1ed9t b\u1ea3n PoC bluetooth YubiKey. \u0110i\u1ec1u \u0111\u00f3 \u0111\u00e3 gi\u00fap ch\u00fang t\u00f4i c\u00f9ng nhau t\u00ecm hi\u1ec3u c\u00e1ch m\u1ed9t s\u1ed1 tri\u1ec3n khai v\u00e0 t\u00ednh n\u0103ng bluetooth kh\u00f4ng \u0111\u00e1ng tin c\u1eady c\u00f3 th\u1ec3 t\u1ed3n t\u1ea1i tr\u00ean th\u1ecb tr\u01b0\u1eddng. Ch\u1ee9c n\u0103ng \u201c\u0111i\u1ec7n tho\u1ea1i l\u00e0m kh\u00f3a b\u1ea3o m\u1eadt\u201d m\u1edbi n\u00e0y s\u1eed d\u1ee5ng nh\u1eefng g\u00ec ch\u00fang t\u00f4i \u0111\u00e3 t\u00ecm hi\u1ec3u \u0111\u01b0\u1ee3c chung t\u1eeb giao th\u1ee9c \u0111\u00f3 v\u00e0 s\u1eed d\u1ee5ng k\u1ebft n\u1ed1i internet \u0111\u1ec3 ch\u1ee7 y\u1ebfu tr\u00e1nh bluetooth ngo\u1ea1i tr\u1eeb vi\u1ec7c ch\u1ee9ng minh s\u1ef1 g\u1ea7n g\u0169i v\u1ec1 m\u1eb7t kho\u1ea3ng c\u00e1ch. (N\u1ebfu b\u1ea1n c\u1ea3m th\u1ea5y t\u00f2 m\u00f2, giao th\u1ee9c n\u00e0y \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 caBLEv2 v\u00e0 s\u1eafp \u0111\u01b0\u1ee3c \u0111\u1ed5i t\u00ean th\u00e0nh ph\u01b0\u01a1ng ti\u1ec7n truy\u1ec1n t\u1ea3i “k\u1ebft h\u1ee3p”).<\/li>\n
  2. Theo m\u1eb7c \u0111\u1ecbnh, th\u00f4ng tin \u0111\u0103ng nh\u1eadp FIDO tr\u00ean c\u00e1c n\u1ec1n t\u1ea3ng s\u1ebd \u0111\u01b0\u1ee3c t\u1ef1 \u0111\u1ed9ng sao ch\u00e9p sang c\u00e1c thi\u1ebft b\u1ecb kh\u00e1c \u0111\u00e3 \u0111\u0103ng nh\u1eadp v\u00e0o tr\u00ecnh qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u c\u1ee7a c\u00f9ng n\u1ec1n t\u1ea3ng, gi\u1ed1ng nh\u01b0 c\u00e1ch ho\u1ea1t \u0111\u1ed9ng c\u1ee7a m\u1eadt kh\u1ea9u ng\u00e0y nay. \u0110i\u1ec1u n\u00e0y \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n \u0111\u1ec3 gi\u00fap kh\u00f4i ph\u1ee5c d\u1ec5 d\u00e0ng sau khi m\u1ea5t thi\u1ebft b\u1ecb, nh\u01b0ng \u0111i k\u00e8m v\u1edbi s\u1ef1 c\u00e2n b\u1eb1ng v\u1ec1 b\u1ea3o m\u1eadt.<\/li>\n<\/ol>\n

    C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a nh\u1eefng kh\u00e1i ni\u1ec7m m\u1edbi n\u00e0y v\u1eabn \u0111ang trong giai \u0111o\u1ea1n th\u1eed nghi\u1ec7m v\u00e0 c\u00f3 th\u1ec3 thay \u0111\u1ed5i, nh\u01b0ng b\u1ea1n c\u00f3 th\u1ec3 mong \u0111\u1ee3i s\u1ebd th\u1ea5y nhi\u1ec1u h\u01a1n v\u1ec1 ch\u00fang khi c\u00e1c tri\u1ec3n khai g\u1ea7n ho\u00e0n th\u00e0nh. B\u1ea1n c\u00f3 th\u1ec3 \u0111\u1ecdc th\u00eam trong b\u00e0i \u0111\u0103ng tr\u00ean blog tr\u01b0\u1edbc \u0111\u00e2y c\u1ee7a ch\u00fang t\u00f4i v\u1ec1 ch\u1ee7 \u0111\u1ec1 n\u00e0y.<\/p>\n

    Ch\u00fang t\u00f4i \u0111\u1ea3m b\u1ea3o s\u1ebd ti\u1ebfp t\u1ee5c xu\u1ea5t b\u1ea3n th\u00f4ng tin khi ch\u00fang xu\u1ea5t x\u01b0\u1edfng, v\u00e0 c\u0169ng s\u1ebd cung c\u1ea5p h\u01b0\u1edbng d\u1eabn chi ti\u1ebft cho nh\u00e0 ph\u00e1t tri\u1ec3n \u0111\u1ec3 \u0111i\u1ec1u h\u01b0\u1edbng c\u00e1c thay \u0111\u1ed5i v\u1ec1 giao th\u1ee9c v\u00e0 m\u00e3 c\u1ea7n thi\u1ebft \u0111\u1ec3 t\u1eadn d\u1ee5ng t\u1ed1i \u0111a t\u00ednh linh ho\u1ea1t c\u1ee7a nh\u1eefng thay \u0111\u1ed5i n\u00e0y, trong khi tri\u1ec3n khai b\u1ea3o m\u1eadt y\u00eau c\u1ea7u c\u1ee7a c\u00e1c \u1ee9ng d\u1ee5ng ph\u1ee5 thu\u1ed9c v\u00e0o ch\u00fang.<\/p>\n

    Q: Passkey kh\u00e1c YubiKey nh\u01b0 th\u1ebf n\u00e0o?<\/b><\/strong><\/p>\n

    Ch\u00fang gi\u1ed1ng nhau nh\u01b0ng c\u0169ng kh\u00e1c nhau.<\/p>\n

    Ch\u00fang gi\u1ed1ng nhau v\u00ec YubiKeys \u0111\u00e3 c\u00f3 kh\u1ea3 n\u0103ng t\u1ea1o c\u00e1c th\u00f4ng tin x\u00e1c th\u1ef1c FIDO2 \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t kh\u00f4ng c\u1ea7n m\u1eadt kh\u1ea9u (m\u00e3 kh\u00f3a) k\u1ec3 t\u1eeb khi YubiKey 5 Series ra m\u1eaft v\u00e0o gi\u1eefa n\u0103m 2018. Hi\u1ec7n t\u1ea1i, YubiKeys c\u00f3 th\u1ec3 l\u01b0u tr\u1eef t\u1ed1i \u0111a 25 m\u00e3 kh\u00f3a (passkey). Ch\u00fang t\u00f4i \u0111ang \u0111\u00e1nh gi\u00e1 vi\u1ec7c t\u0103ng kh\u1ea3 n\u0103ng n\u00e0y trong t\u01b0\u01a1ng lai v\u00ec nhu c\u1ea7u t\u0103ng tr\u1ea3i nghi\u1ec7m ho\u00e0n to\u00e0n kh\u00f4ng c\u1ea7n m\u1eadt kh\u1ea9u tr\u00ean web.<\/p>\n

    Ch\u00fang kh\u00e1c nhau v\u00ec c\u00e1c passkey do N\u1ec1n t\u1ea3ng t\u1ea1o ra s\u1ebd c\u00f3 th\u1ec3 sao ch\u00e9p theo m\u1eb7c \u0111\u1ecbnh b\u1eb1ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp cho t\u00e0i kho\u1ea3n \u0111\u00e1m m\u00e2y c\u01a1 b\u1ea3n (c\u00f3 th\u1ec3 c\u00f3 th\u00eam c\u1ee5m m\u1eadt kh\u1ea9u \u0111\u1ed3ng b\u1ed9 h\u00f3a tr\u00ecnh qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u), trong khi c\u00e1c passkey trong YubiKey \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi ph\u1ea7n c\u1ee9ng v\u1eadt l\u00fd c\u1ee7a YubiKey n\u01a1i ch\u00fang kh\u00f4ng th\u1ec3 sao ch\u00e9p .<\/p>\n

    Q: C\u00e1c thu\u1eadt ng\u1eef n\u00e0o Yubico s\u1eed d\u1ee5ng \u0111\u1ec3 n\u00f3i v\u1ec1 passkey?<\/b><\/strong><\/p>\n

    Ch\u00fang t\u00f4i th\u00edch thu\u1eadt ng\u1eef passkey v\u00e0 c\u00f3 k\u1ebf ho\u1ea1ch s\u1eed d\u1ee5ng n\u00f3. V\u00ec nhi\u1ec1u th\u1ee9 \u0111ang \u0111\u01b0\u1ee3c n\u00f3i \u0111\u1ebfn c\u00f9ng m\u1ed9t l\u00fac, ch\u00fang t\u00f4i s\u1ebd c\u1ed1 g\u1eafng s\u1eed d\u1ee5ng thu\u1eadt ng\u1eef m\u1ed9t c\u00e1ch nh\u1ea5t qu\u00e1n \u0111\u1ec3 l\u00e0m r\u00f5 s\u1ef1 kh\u00e1c bi\u1ec7t ho\u1eb7c \u0111i\u1ec3m t\u01b0\u01a1ng \u0111\u1ed3ng t\u00f9y theo t\u00ecnh hu\u1ed1ng. \u0110\u00e2y v\u1eabn l\u00e0 m\u1ed9t c\u00f4ng vi\u1ec7c \u0111ang \u0111\u01b0\u1ee3c ti\u1ebfn h\u00e0nh trong to\u00e0n ng\u00e0nh v\u00e0 ch\u00fang t\u00f4i s\u1ebd th\u00edch nghi khi m\u1ecdi th\u1ee9 thay \u0111\u1ed5i.<\/p>\n

    D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t v\u00e0i v\u00ed d\u1ee5 c\u00f3 th\u1ec3 h\u1eefu \u00edch:<\/p>\n

      \n
    1. C\u00e1c passkey c\u00f3 th\u1ec3 sao ch\u00e9p th\u01b0\u1eddng \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 \u201c\u0111a thi\u1ebft b\u1ecb\u201d, \u201cc\u00f3 th\u1ec3 \u0111\u1ed3ng b\u1ed9 h\u00f3a\u201d, \u201c\u0111\u00e3 b\u1eadt sao l\u01b0u\u201d ho\u1eb7c c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1.
      \nM\u1ed9t s\u1ed1 thu\u1eadt ng\u1eef n\u00e0y d\u1ec5 b\u1ecb nh\u1ea7m l\u1eabn v\u1edbi kh\u00e1i ni\u1ec7m WebAuthn\/FIDO v\u1ec1 “ph\u1ea7n \u0111\u00ednh k\u00e8m” c\u1ee7a thi\u1ebft b\u1ecb x\u00e1c th\u1ef1c c\u00f3 th\u1ec3 c\u00f3 c\u00e1c gi\u00e1 tr\u1ecb “n\u1ec1n t\u1ea3ng” ho\u1eb7c “\u0111a n\u1ec1n t\u1ea3ng”.
      \nCh\u00fang t\u00f4i th\u00edch s\u1eed d\u1ee5ng “c\u00f3 th\u1ec3 sao ch\u00e9p” (copyable) v\u00ec n\u00f3 m\u00f4 t\u1ea3 r\u00f5 r\u00e0ng nh\u1eefng g\u00ec c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n v\u1edbi th\u00f4ng tin x\u00e1c th\u1ef1c, nh\u01b0ng kh\u00f4ng ng\u1ee5 \u00fd b\u1ea5t k\u1ef3 \u0111i\u1ec1u t\u1ed1t hay x\u1ea5u n\u00e0o v\u00e0 kh\u00f4ng s\u1eed d\u1ee5ng c\u00e1c thu\u1eadt ng\u1eef qu\u00e1 t\u1ea3i ho\u1eb7c kh\u00f3 hi\u1ec3u.<\/li>\n<\/ol>\n
        \n
      1. C\u00e1c passkey kh\u00f4ng th\u1ec3 sao ch\u00e9p \u0111\u00f4i khi \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 \u201cpasskey cho m\u1ed9t thi\u1ebft b\u1ecb\u201d.
        \nCh\u00fang t\u00f4i th\u00edch s\u1eed d\u1ee5ng “r\u00e0ng bu\u1ed9c ph\u1ea7n c\u1ee9ng” (hardware bound) v\u00ec n\u00f3 m\u00f4 t\u1ea3 v\u1ecb tr\u00ed c\u1ee7a th\u00f4ng tin x\u00e1c th\u1ef1c r\u00f5 r\u00e0ng m\u00e0 kh\u00f4ng ng\u1ee5 \u00fd r\u1eb1ng th\u00f4ng tin x\u00e1c th\u1ef1c ch\u1ec9 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng v\u1edbi m\u1ed9t thi\u1ebft b\u1ecb (tr\u00e1i ng\u01b0\u1ee3c v\u1edbi t\u1eeb m\u1ed9t thi\u1ebft b\u1ecb).<\/li>\n<\/ol>\n

         <\/p>\n

        Q: S\u1ef1 c\u00e2n b\u1eb1ng b\u1ea3o m\u1eadt gi\u1eefa c\u00e1c passkey r\u00e0ng bu\u1ed9c ph\u1ea7n c\u1ee9ng (hardware bound) v\u00e0 c\u00f3 th\u1ec3 sao ch\u00e9p (copyable) l\u00e0 g\u00ec?<\/b><\/strong><\/p>\n

        Hardware bound passkey, gi\u1ed1ng nh\u01b0 passkey tr\u00ean YubiKey, l\u00e0 ti\u00eau chu\u1ea9n v\u00e0ng cho b\u1ea3o m\u1eadt v\u00e0 x\u00e1c th\u1ef1c hi\u1ec7n \u0111\u1ea1i, ch\u1ed1ng l\u1eeba \u0111\u1ea3o. R\u1ea5t d\u1ec5 x\u00e2y d\u1ef1ng h\u1ec7 th\u1ed1ng xung quanh: kh\u00f4ng c\u00f3 thi\u1ebft b\u1ecb, kh\u00f4ng c\u00f3 quy\u1ec1n truy c\u1eadp. Tuy nhi\u00ean, \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi ti\u00eau d\u00f9ng \u0111\u0103ng k\u00fd th\u00f4ng tin x\u00e1c th\u1ef1c cho nhi\u1ec1u trang web, vi\u1ec7c qu\u1ea3n l\u00fd nhi\u1ec1u tr\u00ecnh x\u00e1c th\u1ef1c c\u00f3 th\u1ec3 g\u00e2y ra th\u00e1ch th\u1ee9c.<\/p>\n

        Copyable passkey c\u00f3 th\u1ec3 gi\u00fap kh\u00f4i ph\u1ee5c d\u1ec5 d\u00e0ng h\u01a1n trong tr\u01b0\u1eddng h\u1ee3p thi\u1ebft b\u1ecb b\u1ecb m\u1ea5t, n\u1ebfu ng\u01b0\u1eddi d\u00f9ng c\u00f3 m\u1ed9t thi\u1ebft b\u1ecb ho\u1ea1t \u0111\u1ed9ng v\u00e0 s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 \u0111\u1ed3ng b\u1ed9 h\u00f3a \u0111\u00e1m m\u00e2y \u0111\u1ec3 kh\u00f4i ph\u1ee5c t\u00e0i kho\u1ea3n c\u1ee7a h\u1ecd. Trong tr\u01b0\u1eddng h\u1ee3p kh\u00f4ng c\u00f3 thi\u1ebft b\u1ecb b\u1ecb x\u00e2m ph\u1ea1m, s\u1ef1 hi\u1ec7n di\u1ec7n c\u1ee7a th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c sao ch\u00e9p \u0111\u00f3 ch\u1ee9ng t\u1ecf r\u1eb1ng c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o m\u1ed9t thi\u1ebft b\u1ecb \u0111\u00e3 \u0111\u01b0\u1ee3c \u0111\u0103ng nh\u1eadp v\u00e0o t\u00e0i kho\u1ea3n \u0111\u00e1m m\u00e2y c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. \u0110\u00e2y c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t t\u00edn hi\u1ec7u b\u1ed5 sung h\u1eefu \u00edch, nh\u01b0ng kh\u00f4ng cung c\u1ea5p m\u1ee9c \u0111\u1ed9 b\u1ea3o m\u1eadt t\u01b0\u01a1ng t\u1ef1 nh\u01b0 hardware-bound passkey.<\/p>\n

        Ch\u00fang t\u00f4i s\u1ebd m\u1edf r\u1ed9ng nhi\u1ec1u h\u01a1n v\u1ec1 ch\u1ee7 \u0111\u1ec1 n\u00e0y trong t\u01b0\u01a1ng lai cho c\u00e1c \u0111\u1ed1i t\u01b0\u1ee3ng kh\u00e1c nhau khi tri\u1ec3n khai passkey r\u1ed9ng r\u00e3i.<\/p>\n

        Q: H\u01b0\u1edbng d\u1eabn chung c\u1ee7a Yubico v\u1ec1 passkey l\u00e0 g\u00ec?<\/b><\/strong><\/p>\n

          \n
        • Copyable passkey\u00a0 cung c\u1ea5p b\u1ea3o m\u1eadt g\u1ea7n gi\u1ed1ng nh\u01b0 \u201c\u0110\u0103ng nh\u1eadp b\u1eb1ng Google\/Apple\u201d, c\u00f9ng v\u1edbi m\u1eadt kh\u1ea9u \u0111\u1ed3ng b\u1ed9 h\u00f3a kh\u00f3a b\u1ed5 sung.<\/li>\n
        • Ng\u00e0y nay, c\u00e1c ng\u00e2n h\u00e0ng, doanh nghi\u1ec7p v\u00e0 nh\u1eefng ng\u01b0\u1eddi mu\u1ed1n ho\u1eb7c c\u1ea7n b\u1ea3o m\u1eadt cao s\u1ebd kh\u00f4ng ch\u1ec9 d\u1ef1a v\u00e0o b\u1ea3o m\u1eadt c\u1ee7a t\u00e0i kho\u1ea3n \u0111\u00e1m m\u00e2y d\u00e0nh cho ng\u01b0\u1eddi ti\u00eau d\u00f9ng, ngay c\u1ea3 khi th\u00f4ng tin \u0111\u0103ng nh\u1eadp FIDO\/WebAuthn c\u00f3 th\u1ec3 sao ch\u00e9p \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 cung c\u1ea5p s\u1ef1 tin t\u01b0\u1edfng \u0111\u00f3 thay v\u00ec c\u00e1c giao th\u1ee9c \u0111\u0103ng nh\u1eadp li\u00ean k\u1ebft nh\u01b0 SAML, OpenID Connect ho\u1eb7c OAuth ch\u1eb3ng h\u1ea1n nh\u01b0 \u0110\u0103ng nh\u1eadp b\u1eb1ng Google \/ Apple.<\/li>\n
        • V\u00f4 s\u1ed1 c\u00e1c tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng b\u1ea3o m\u1eadt cao m\u00e0 nhi\u1ec1u t\u1ed5 ch\u1ee9c ph\u1ea3i \u0111\u1ed1i m\u1eb7t c\u1ea7n nhi\u1ec1u giao th\u1ee9c h\u01a1n l\u00e0 ch\u1ec9 FIDO, v\u00e0 h\u1ecd c\u1ea7n c\u00e1c \u0111\u1ea3m b\u1ea3o b\u1ea3o m\u1eadt v\u00e0 ch\u1ee9ng th\u1ef1c m\u1eadt m\u00e3 \u0111\u01b0\u1ee3c cung c\u1ea5p b\u1edfi c\u00e1c th\u00f4ng tin x\u00e1c th\u1ef1c tr\u00ean ph\u1ea7n c\u1ee9ng.<\/li>\n
        • C\u00e1c d\u1ecbch v\u1ee5 n\u00ean ti\u1ebfp t\u1ee5c y\u00eau c\u1ea7u v\u00e0 l\u01b0u tr\u1eef th\u00f4ng tin ch\u1ee9ng th\u1ef1c \u0111\u1ec3 h\u1ecd c\u00f3 th\u1ec3 \u0111\u01b0a ra c\u00e1c quy\u1ebft \u0111\u1ecbnh r\u1ee7i ro d\u1ef1a tr\u00ean lo\u1ea1i th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng. H\u01b0\u1edbng d\u1eabn c\u1ee7a ch\u00fang t\u00f4i v\u1ec1 ch\u1ee9ng th\u1ef1c \u0111\u01b0\u1ee3c cung c\u1ea5p chi ti\u1ebft h\u01a1n tr\u00ean trang d\u00e0nh cho nh\u00e0 ph\u00e1t tri\u1ec3n.<\/li>\n
        • Ch\u00fang t\u00f4i hy v\u1ecdng r\u1eb1ng s\u1ef1 th\u00fac \u0111\u1ea9y v\u1ec1 passkey l\u1ea5y ng\u01b0\u1eddi ti\u00eau d\u00f9ng l\u00e0m trung t\u00e2m s\u1ebd thu h\u00fat nhi\u1ec1u h\u01a1n n\u1eefa c\u00e1c d\u1ecbch v\u1ee5 h\u1ed7 tr\u1ee3 WebAuthn\/FIDO.<\/li>\n
        • Hy v\u1ecdng vi\u1ec7c s\u1eed d\u1ee5ng nhi\u1ec1u h\u01a1n WebAuthn\/FIDO c\u00f3 ngh\u0129a l\u00e0 cu\u1ed1i c\u00f9ng s\u1ebd c\u00f3 \u00edt ng\u01b0\u1eddi s\u1eed d\u1ee5ng h\u01a1n v\u00e0 \u00edt d\u1ecbch v\u1ee5 h\u01a1n s\u1ebd ph\u1ea3i \u0111\u1ed1i ph\u00f3 v\u1edbi vi\u1ec7c t\u1ea1o v\u00e0 b\u1ea3o m\u1eadt c\u00e1c h\u1ec7 th\u1ed1ng d\u1ef1a tr\u00ean m\u1eadt kh\u1ea9u v\u00e0 t\u00ean ng\u01b0\u1eddi d\u00f9ng ti\u1ec1m \u1ea9n nhi\u1ec1u r\u1ee7i ro nguy hi\u1ec3m.<\/li>\n<\/ul>\n

          Ch\u00fang t\u00f4i r\u1ea5t vui v\u00ec c\u00e1c ti\u00eau chu\u1ea9n m\u00e0 ch\u00fang t\u00f4i c\u00f9ng t\u1ea1o ra v\u00e0 n\u1ed7 l\u1ef1c c\u1ea3i thi\u1ec7n trong nhi\u1ec1u n\u0103m s\u1ebd \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng r\u1ed9ng r\u00e3i h\u01a1n n\u1eefa, v\u00e0 hy v\u1ecdng r\u1eb1ng nh\u1eefng chuy\u1ec3n \u0111\u1ed9ng n\u00e0y s\u1ebd ti\u1ebfp t\u1ee5c gi\u1ea3m thi\u1ec3u t\u00e1c h\u1ea1i v\u00e0 th\u00fac \u0111\u1ea9y s\u1ee9 m\u1ec7nh c\u1ee7a ch\u00fang t\u00f4i: gi\u00fap Internet an to\u00e0n h\u01a1n cho t\u1ea5t c\u1ea3 m\u1ecdi ng\u01b0\u1eddi.<\/p>\n

          Ngu\u1ed3n: Christopher Harrell – Yubico blog<\/p>\n","protected":false},"excerpt":{"rendered":"

          Passkey c\u0169ng gi\u1ed1ng nh\u01b0 m\u1eadt kh\u1ea9u, nh\u01b0ng t\u1ed1t h\u01a1n m\u1eadt kh\u1ea9u v\u00ec ch\u00fang kh\u00f4ng \u0111\u01b0\u1ee3c t\u1ea1o ra m\u1ed9t c\u00e1ch thi\u1ebfu an to\u00e0n b\u1edfi con ng\u01b0\u1eddi. Passkey s\u1eed d\u1ee5ng m\u1eadt m\u00e3 kh\u00f3a c\u00f4ng khai \u0111\u1ec3 t\u1ea1o ra nh\u1eefng tr\u1ea3i nghi\u1ec7m an to\u00e0n h\u01a1n nhi\u1ec1u.\u00a0<\/p>\n","protected":false},"author":8,"featured_media":11153,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[66],"tags":[],"class_list":["post-11163","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-vi"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/11163","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=11163"}],"version-history":[{"count":0,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/11163\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media\/11153"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=11163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=11163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=11163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}