Secure your application with WebAuthn
summary
WebAuthn is presented as a replacement for passwords using asymmetric cryptography: registration yields a public key plus attestation, and login sends an assertion signed by a private key kept on the device. Demos use USB FIDO keys, Android phone and platform authenticators, show counter-based anti-cloning, attestation options, a passwordless flow, and recommend registering two keys for recovery. Integration examples use Keycloak and Java/Spring libraries with end-to-end demos that authenticate without sending secrets to the server.
AI-written summary · about
chapters (5)
- 0:00Start
- 3:41Moyen d'authentification
- 12:28Chiffrement symétrique
- 13:27Cryptographie asymétrique
- 14:09Signature / Vérification
related talks
01h 14mWebAuthn: Theory and practice
20mWebAuthn: The Revival of Authentication
44mWebAuthn: Strong Authentication vs Privacy vs Convenience
29mWebAuthn and security keys - unlocking the key to authentication
27mSay Goodbye to Passwords and Hello to WebAuthn
49mA Passwordless Future! WebAuthn for Java Developers
46mPassword-less apps: implementing WebAuthN
53mUser-friendly, phishing-proof 2FA with WebAuthn