Simple. Open. Mobile: A Look at the Future of Strong Authentication
summary
FIDO U2F and FIDO2 (WebAuthn) replace phishable passwords with public‑key challenge‑response: the browser signs the challenge plus origin is signed so attackers cannot replay credentials from phishing sites. Authenticators use USB/NFC/Bluetooth with user‑presence or PIN/biometric checks, and resident keys enable passwordless login by storing credential IDs and user handles on device. Chrome, Firefox and major platforms are shipping support; registration requires multiple authenticators for backup and a new capable device, and the protocol prevents server breaches from leaking reusable secrets.
AI-written summary · about
chapters (8)
- 0:00Introduction to authentication challenges
- 3:22Why current methods fail
- 11:55Redesigning authentication systems
- 14:04FIDO 2 protocol basics
- 19:58Preventing phishing attacks
- 24:37Moving beyond passwords
- 28:40WebAuthn adoption status
- 32:03Q&A and future outlook
related talks
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
29mWebAuthn and security keys - unlocking the key to authentication
38mBreaking FIDO: Are Exploits in There?
18mA path to a world without passwords
32mSecuring Online Identities with Simple, Secure, Open Standards
47mWhy FIDO Security Keys & Webauthn are Awesome
30mHow FIDO U2F Security Keys Work
01h 14mWebAuthn: Theory and practice