Taking the pain out of passwords and authentication
summary
Starts with concrete fixes: use horsephrase for memorable passphrases, django-zxcvbn for entropy checks, and an option that saves about seven taps by permuting passwords for phones. Introduces UAF and U2F, shows Python/Django code and a live demo registering a U2F key (Ubico), explains key handles, attestation, and the clone-detection counter. Notes current browser/hardware reality: Chrome-only support for U2F today with Edge/Android drivers coming, and practical Django integration examples and fallbacks.
AI-written summary · about
chapters (11)
- 0:00The problem with passwords
- 1:16Complexity and legacy issues
- 3:25Evaluating the alternatives
- 7:37Mitigating password fatigue
- 12:59Usability and best practices
- 18:29Introducing the FIDO Alliance
- 25:05U2F implementation technicals
- 31:50Second-factor security design
- 37:45Demonstration of U2F in Django
- 43:25Browser support and resources
- 47:16Q&A session
