Panel: America Loves FIDO
summary
US government agencies are actively moving from passwords and SMS OTP toward FIDO passkeys — login.gov already accepts passkeys and NIST issues an immediate supplement treating single passkeys as AAL2. Guidance stresses differences between consumer and enterprise deployments, recommends device management and MDM controls, and flags risks with sync fabrics and shared/syncable keys. National Security Systems keep PIV/CAC remains primary for high-assurance needs. Barriers are legacy stacks, procurement constraints, staffing, and the need for post‑quantum and clearer standards work.
AI-written summary · about
chapters (12)
- 0:00Introduction to panel
- 1:47Panelist introductions
- 3:16Government adoption of FIDO
- 5:45NIST supplement on sync passkeys
- 8:50Enterprise vs consumer passkeys
- 11:00NSA’s role in authentication
- 12:26CISA’s outreach to private sector
- 14:52Barriers to FIDO adoption
- 18:46PIV cards and FIDO future
- 26:15FIDO vs other authenticators
- 29:05Threat landscape and gaps
- 34:27Closing remarks and Q&A
related talks
02h 22mFIDO 101
01h 00mFeatured Keynote
26mHey FIDO Meet Passkey
07mImagine: A world without passwords, it is easy if you try
05m“You still use the password after all” – Exploring FIDO2 Security Keys in a Small
34mFIDO Welcome Address
24mStreaming Authentication
50mFIDO Passkeys - Passwordless in the Future