Passwordless in PAM: Myth or Reality?
summary
Discussion of integrating passwordless authentication into PAM-based systems, covering technologies such as FIDO2/WebAuthn (hardware keys), TOTP/push one-time tokens, biometric methods, and PKI certificates. Examines security risks and user experience trade-offs of replacing passwords, and describes implementation approaches in PAM using protocols like SAML and OAuth and hybrid deployment scenarios.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:10Password auth problems
- 9:48Password attack methods
- 18:05Goal of passwordless
- 20:55Passwordless in PAM
- 28:01Passwordless pros and cons
- 31:56Implementation recommendations
- 32:37Q&A
related talks
43mPasswordless: a story of risk, protection and excellent UX
34mPasswordless: a story of risk, protection & excellent UX
38mJourney to passwordless
32mPasswordless Auth: a JSON-Based Approach for modern authentication w/ SSSD & GNOME
26mPasswordless Future!!
30mGoing Beyond Passwords: The Future of User Authentication
55mYou Shall Not Password: Modern Authentication for Web Apps
51mYou Shall Not Password: Modern Authentication for Web Apps
