Innovation in Authentication and More
summary
Claim: 80% of breaches involve identity, driven by siloed logs, unmanaged devices and exfiltrated session cookies. Practical fixes: adopt passkeys (phishing‑resistant), add device bound session credentials to tie cookies to a device so stolen tokens are useless, implement a Shared Signals Framework to broadcast compromised states and log users out, and use verifiable credentials at onboarding to replace magic links and auth codes. Demos mention Google/Microsoft work and a new credential exchange protocol to reduce vendor lock‑in.
AI-written summary · about
chapters (8)
- 0:00Introduction by hosts
- 1:04Why identity breaches keep rising
- 2:48Gaps in workforce identity protection
- 4:13Frustrating user experiences today
- 7:05Solutions with passkeys and beyond
- 9:35Enhancing security with layered tech
- 10:36End-to-end passwordless vision
- 15:11Next steps and resources
related talks
37mCustomer Identity for Modern Apps and APIs
16mSecurity, Fraud, and Compliance
45mRedefining Security: From Passwords to Biometrics and Digital Signatures
30mGoing Beyond Passwords: The Future of User Authentication
30mInsecurity protocols: an overview of modern authentication
31mLog In Through the Front Door: Automating Defense Against...
15mThe evolution of user logins
42mChallenges in User Authentication: Balancing Security & User Experience