Web Authentication - Imagine a World Without Passwords
summary
Claim: one team drove an early commercial implementation of Web Authentication / WebAuthn in browsers and Node.JS, integrating Windows Hello and Touch ID so fingerprint login actually replaces passwords in demos. Tools and numbers: public‑key credentials, attestation certificates, CBOR/COSE parsing, a 17‑point backend verification flow, and Duo’s phishing results (31% click rate, 17% submit rate) supporting the need to replace passwords. Engineering note: frontend API is two calls but backend work is fiddly and there’s no solid Node library yet.
AI-written summary · about
chapters (4)
- 0:00Start
- 6:36Passwords are hard to create and remember.
- 9:02Passwords encourage unsafe re-use.
- 9:32Passwords are hard to secure.
related talks
34mThe Web Authentication API - Imagine a World Without Passwords
45mPasswords Are So 1990
27mSay Goodbye to Passwords and Hello to WebAuthn
44mWebAuthn: Strong Authentication vs Privacy vs Convenience
47mPasswords are so 1990
01h 14mWebAuthn: Theory and practice
39mPasswords are so 1990 - Sam Bellen - PHP UK 2022
25mWeb Authentication: From Draft To Product