Webauthn Works

Professional password eradication services. Consulting, training, development, security, open source.

#FIDO2 #UAF #U2F #WebAuthn

Tweets by @herrjemand

[Webauthn Works @WebauthnWorks]

If you had questions about attestation, metadata or metadata service, our latest article will hopefully answer all of them:

Introducing next article in our series: Demystifying attestation and MDS

#FIDO2 #WebAuthn #U2F #FIDO #Attestation

https://t.co/S4jW1T2LeX

[Webauthn Works @WebauthnWorks]

#FIDO2 passwordless is a SINGLE STEP not SINGLE FACTOR

https://t.co/jKAPxjrkjB

[Login Llama @LoginLlama]

https://t.co/eRcZZRmWgp

[Webauthn Works @WebauthnWorks]

@MIT_ISTnews @MIT Go home MIT. You are drunk.

[Login Llama @LoginLlama]

You can use WebAuthn now, it is the credential syncing via keychain that is in beta.

https://t.co/NgrojPjJxQ

[Webauthn Works @WebauthnWorks]

Great book by @IAMSimonMo on Identity and IAM! Highly recommend!

[Webauthn Works @WebauthnWorks]

@FIDOAlliance released new MDS3 specs and service. We made overview of the changes and migration guide for MDS2 servers.

TL;DR MDS3 is awesome!

https://t.co/foxSbl8imJ

#FIDO #FIDO2 #WebAuthn

[Login Llama @LoginLlama]

It is an interesting experiment, but I agree with @herrjemandthat this is just too easy to automate. https://t.co/xlq9CPNfPN

[Adam Langley @agl__]

(Just grounding out the cap sensor on a security key is enough to trigger a "touch". No drinking birds required.)

[Login Llama @LoginLlama]

Interesting, but you can automate triggering a user presence touch quite efficiently. What you really need is a slow key generation alg for make credential. I suspect that this may not slow bots down as much as hoped.

[Login Llama @LoginLlama]

https://t.co/3HGMGMXjZj

[Jeremy Grant @jgrantindc]

I talked pornography, hair loss, phishing and @FIDOAlliance with @atlblog

https://t.co/kRRZspJlo9

[Adam Langley @agl__]

With 14.5, WebAuthn works in Chrome on iOS now. Thank you Apple!