Open Source Authentication: Security without high cost
summary
Claims an open, low-cost route to strong authentication by using the OATH algorithms HOTP and TOTP (IETF standards), a free LinOTP server from LSExperts, and a certification program that already validates 30+ products. Presenter cites market data — about 230 million tokens compromised in the RSA breach, 780 breaches and 169 million records leaked last year — and shows a working LinOTP deployment that drops per-user cost from tens of dollars to roughly two dollars while interoperating with existing tokens and RADIUS/SAML stacks.
AI-written summary · about
chapters (39)
- 0:00Intro
- 1:40Why strong authentication
- 2:05Companies in common
- 3:20RSA hack
- 4:40Market size
- 7:23Breach statistics
- 12:42Online fraud
- 13:42Hackers everywhere
- 14:20Breaches
- 15:40Trends
- 16:43Why now
- 19:28Authentication methods
- 20:06Issues faced by IT managers
- 20:36What is Oath
- 22:15Members of Oath
- 23:42Algorithms
- 25:17Roadmap
- 26:16Certification Program
- 27:26Review
- 28:38Framework
- 29:13Oath
- 30:37Credential provisioning
- 31:18Objectives
- 31:28Certification
- 32:01Typical Scenario
- 32:34Framework Overview
- 33:10Why OTP is still expensive
- 33:32Why OTP should be a commodity
- 35:03Lin OTP
- 36:30Lin schematic
- 37:11Authentication integration architecture
- 37:27Thirdparty authentication
- 38:14Adaptive Authentication
- 38:32Biometrics
- 40:54Behavioral Advantage
- 41:32Security Technologies Fail
- 42:10Behavioral Biometrics
- 48:12We are changing
- 49:06Is it creepy
related talks
27mSecure Authentication without the Need for Passwords
30mInsecurity protocols: an overview of modern authentication
33mBreaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows
26mHolistic Authentication
01h 28mHow to 2FA-enable Open Source Applications
28mGetting to know your users
58mOAuth and the long way to Proof of Possession
30mGoing Beyond Passwords: The Future of User Authentication