A Passwordless Future! Passkeys for Java Developers
summary
Claims that 60% of breaches trace to credentials and that passkeys remove those vectors by replacing secrets with public key crypto. Shows concrete Java tooling and flows: Spring Boot app, browser WebAuthn calls, server verifies attestation/assertion, uses WebAuthn/FIDO2 concepts and the WebAuthn4J library, and demonstrates using a phone as a roaming authenticator and U2F keys. Explains sync vs device-bound tradeoffs, backup and recovery needs, and that demos mostly work though live demos sometimes glitch.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:25Why passwordless future
- 7:35Passkeys introduction
- 9:20Underlying technologies
- 15:44Passkeys variants
- 20:40Registration flow
- 23:51Authentication flow
- 27:04Passkeys benefits
- 34:54Challenges and limitations
- 37:43Java implementation demo
- 51:43Conclusion and resources
related talks
51mA Passwordless Future! Passkeys for Java Developers
37mA Passwordless Future! Passkeys for Java Developers
49mA Passwordless Future! WebAuthn for Java Developers
43mPasskeys in practice: implementing passwordless apps
47mPasswordless Web
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
01h 06mTutorial: Passkeys to the People: Building a Modern MFA Application with Open Source...- 47mPasswordless Web