The Present and Future of Standardized Authentication Specifications You Can Experience on Android/Chrome
summary
Describes current and upcoming standardized authentication flows that run across Android and Chrome to reduce phishing and user friction. Covers WebOTP cross-device SMS autofill (syncing an SMS one-time code from phone to PC) and WebAuthn passkey QR pairing, where a phone’s biometric unlock lets it act as a FIDO security key; the stack aims to provide FIDO phishing resistance while offering practical account recovery tradeoffs for real services.
AI-written summary · about
chapters (13)
- 0:00Authentication specs intro
- 1:26Passwords to multi-factor
- 6:26Two-factor rise and challenges
- 9:18Phishing threat persists
- 12:28FIDO auth intro
- 15:43FIDO auth challenges
- 18:33Identity federation alternative
- 20:18User-controlled identity wallets
- 22:06Security vs usability
- 23:33Cross-device login UX
- 28:48WebAuthn phone flows
- 33:03Auth trends summary
- 36:58Q&A
related talks
33mSimple. Open. Mobile: A Look at the Future of Strong Authentication
18mA path to a world without passwords
29mWebAuthn and security keys - unlocking the key to authentication
26mPasswordless Future!!
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
01h 14mWebAuthn: Theory and practice
40mWebAuthn 201: How to FIDO
45mSecure your application with WebAuthn