Take for example using ONLYKEY for 2FA ‘hardware key’ with Gmail. On Fedora 38 all is good. The pop up comes up, in Firefox or Chrome, the blue light flashes, push the button, and the challenge is complete.
Not so on Fedora 40, or Debian 12. All browsers tried issue errors.
Note the discussion on the Fedora forums:
Is there something obvious I am missing? It has been working for so long, that has been years since I cracked open the manual. Yes, I do update the firmware. Which brings up another point. The app works fine on D12. It is only the challenge that fails. Something about ignoring a return of ‘50’. anyway take a look at the Fedora forum rather than reproducing all that here.
Yes, the app works fine in D12. Is only the challenge that fails.
In Chrome it issues an error to the system journal, something about ignoring a return value of 50.
The challenge does not work in F40 and D12 with any browser tried: Chromium, Chrome, Chrome-developer, Firefox, Brave, and Edge. In F40 flat pack versions were run with all devices available to the app. The Firefox was always run native, and all were run native in D12.
Because it fails for all browsers I have not suspected the problem to be browser specific.
In F38 default distribution it works fine. So for sites currently setup for a challenge negotiation, I run F38 in a VM and access them. it is a workaround. Note in F38 if I update Firefox, it no longer works.