Go Passwordless with WebAuthn in Ruby
summary
WebAuthn replaces passwords with public‑key credentials and the webauthn-ruby gem implements server‑side verification: origin and challenge checks, signature validation, and signature counters. Deployments include rubygems, GitHub, Shopify and AWS, and passkeys add multi‑device sync via iCloud/Google for portability. Claims: phishing and replay become infeasible, brute force disappears, and adoption milestones hit in 2019 with ongoing standard evolution. Surprising numbers: 81% of breaches stem from stolen passwords while only 28% of users enable 2FA.
AI-written summary · about
chapters (5)
- 0:00Start
- 6:47Phishing & Replay Attack Example
- 9:38What was the standardization process?
- 12:11Digital Signatures
- 14:12Behind the scenes
related talks
46mPasskeys in Ruby
39mNo passwords, no problem: move beyond passwords with webauthn and passkeys
53mUser-friendly, phishing-proof 2FA with WebAuthn
27mSay Goodbye to Passwords and Hello to WebAuthn
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
20mWebAuthn: The Revival of Authentication
44mWebAuthn: Strong Authentication vs Privacy vs Convenience
45mNo Password — No Problem?