Chrome 67 Released With Fix for 34 Security Issues and Support for Password-Free Logins

Chrome team Released the latest stable version of Chrome 67 for Windows, Mac, and Linux. The stable Version 67.0.3396.62 contains a number of improvements and fix for 34 security issues.

Chrome 67 is the first version of the chrome that includes support for passwordless login Web Authentication API, it allows sign into the websites using USB token key, Laptop or smartphone fingerprint sensor and biometric devices.

Mozilla is the first one to add support for WebAuthn with version Firefox 60 and soon to be adopted with Microsoft Edge.

Chrome 67 also adds support for Generic Sensor API it is the universal standard that used n the VR headsets and fitness tracker devices.

Another API is the WebXR Device API the enables developers to create VR and AR experiences on mobile devices and desktops. AR-enabled mobile devices, mobile-based VR headsets like Google Daydream View and Samsung Gear VR, as well as desktop-hosted headsets like Oculus Rift, HTC Vive, and Windows Mixed Reality Headsets.

With Chrome 67 Google depreciated the support for HTTP public key pinning as the Certificate Transparency for all publicly-trusted certificates.

Google also fixed 34 security vulnerabilities, out of the 24 reported by external researchers. Google classified Nine of them as High-Risk vulnerability, twelve as Medium-Risk vulnerability and three low-Risk vulnerability.

Memory usage issue with site isolation was not fixed with Chrome 67, there were about 10-11% higher memory usage in Chrome 67 when isolating all sites with many tabs open. When compared to version 65 the memory usage percentage is slightly down. Site Isolation was introduced with Chrome version 63.

Chrome 67 – Important Upcoming Changes with Chrome

Starting from Chrome 68 which set to release by July 2018, begins to block the third-party software from injecting into chrome and starting from Chrome 72 this option will be removed and it always block code injection.

Chrome 70 to distrust all Symantec SSL/TLS certificates and it is set to release on Aug 30th, 2018.