interviewed – Rich Smith

on YouTube ↗12m

" summary

Cloud-first two‑factor authentication that uses push notifications to beat hard tokens and SMS, integrates U2F hardware tokens and WebAuthn, and prototypes fingerprint and Face ID flows for faster, less error‑prone login. Main customers range from SMBs to universities with tens of thousands of students. Claims: 2FA becomes table stakes; push is quicker than tokens/SMS; WebAuthn adoption in 12–18 months. Productized a commercial Duo Beyond (BeyondCorp model) to enforce device posture and zero‑trust access.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 0:54Who is Duo Security for
3. 1:41Secure Access
4. 2:33TwoStep Authentication
5. 3:38Fingerprint Authentication
6. 4:42Face ID
7. 5:14B2C security
8. 6:52Integration with Europe
9. 7:26U2F

" related talks

• 17m2FA in 2020 & BeyondKelley Robinson · GOTO Chicago 2020
• 22mA Usability Study of Five Two-Factor Authentication MethodsJonathan Dutson · SOUPS 2019
• 24m2FA in 2020 and BeyondKelley Robinson · BSidesSF 2020
• 24mStreaming AuthenticationNick Steele · Authenticate 2022
• 25mAuthentication Beyond SMSKelley Robinson · PasswordsCon 2018 Stockholm
• 24mOf Two Minds about Two-Factor: Understanding Everyday FIDO U2F UsabilitySimon Parkin · SOUPS 2019
• 50mA tale of two sides of 2FAChristine Seeman · NDC London 2020
• 17mImplementing Multi-factor AuthenticationJacob Kaplan-Moss · dotSecurity 2016