~/talk

Tackling Authentication with Phoenix

Talkat ElixirDaze 2017 · 2017-03-02..03-03· [security]

speaker

name:João Maura

links:none on file

resources

video:https://youtu.be/rJVq5prpyj4

slides:none on file

summary

Claims that many passwords are trivially compromised—some cracked within six hours—and 66.5% password reuse motivates moving beyond passwords to specific tools and flows: using coyote TOTP for one‑time codes (compatible with Google Authenticator), issuing JWT stateless auth to avoid session stores and extra DB lookups, and using Guardian pipelines to verify tokens per request. A small library called keeper exists as an experiment and the demos report that the approach works in practice.

AI-written summary · about

chapters (41)

related talks