Streaming Authentication
summary
Argues that FIDO2 is the practical path to faster, lower-friction authentication today, not an immediate jump to passwordless; cites adoption signals (about three out of four Americans use 2FA, 61% use OAuth, 44% use password managers) and hard metrics (MFA lifecycle generates ~35% of helpdesk tickets, U2F has poor usability). Recommends concrete steps: store transport hints in cookies or macaroons, allow multiple authenticators, skip attestation unless required, and prepare for passkeys and conditional UI as they roll out.
AI-written summary · about
chapters (8)
- 0:00Introduction to FIDO2
- 2:09Current state of FIDO2
- 7:53Classical MFA challenges
- 12:06Design and engineering for FIDO2
- 17:20Security considerations for FIDO2
- 19:08Passkeys and conditional UI
- 22:39Building for passwordless future
- 23:26Q&A
related talks
38mJourney to passwordless
33mSimple. Open. Mobile: A Look at the Future of Strong Authentication
07mImagine: A world without passwords, it is easy if you try
24mOf Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
43mPasswordless: a story of risk, protection and excellent UX
23mEnhancing FIDO2 Security for Safety-Critical Applications: Best Practices and Consid...
56mPasskeys 101: Technical Principles of FIDO