Passwords Are Dead, Long Live Passwords!
summary
Claims that WebAuthn plus CTAP (FIDO) can replace passwords for web apps and also serve as a robust second factor, demonstrated end to end with an Express backend issuing server‑side random challenges and a USB security key that signs responses and returns attestation which the server verifies against vendor metadata this demo uses navigator.credentials.create/get to register and authenticate, stores public keys and attestation info, and successfully logs in the user transports shown include USB/NFC/Bluetooth LE and CTAP2 adds biometric single‑factor passwordless options
AI-written summary · about
chapters (37)
- 0:00Intro
- 0:42Alejandro Oviedo
- 1:18Security Talk
- 1:46Password History
- 3:59Robert Morris
- 4:31Department of Defense
- 5:35Research
- 6:47NIST
- 8:36Bill Gates
- 9:04Bill Gates Prediction
- 9:29The Password Comic
- 10:59The Status Cue
- 11:18Biometrics
- 12:29Password Managers
- 14:15Library Book
- 14:41Password Sticker
- 15:05World Without Passwords
- 15:35Authentication Standards
- 18:28Registration Process
- 20:21Demo
- 20:45Flashing Lab
- 21:31Passons
- 22:05Logging In
- 23:53Get Credential Challenge
- 24:13Server Code
- 25:00Response Properties
- 26:02Pre Property
- 26:55Phone
- 27:18Web Authentication
- 28:22Logging
- 31:02Backend
- 31:21Navigator
- 31:46Authenticator
- 32:53Logging Verification
- 33:35Logging Verification Diagram
- 35:47Conclusion
- 37:08Outro
