Great thread on FIDO2/WebAuthn company integration!

WebAutn level 2 is now a recommendation. That is W3C speak for the second version of WebAuthn is now an approved standard. w3.org/TR/webauthn/

With 14.5, WebAuthn works in Chrome on iOS now. Thank you Apple!

I talked pornography, hair loss, phishing and The FIDO Alliance with Above the Law abovethelaw.com/2021/04/pandem…

darkreading.com/edge/theedge/p…

(Just grounding out the cap sensor on a security key is enough to trigger a "touch". No drinking birds required.)

Interesting, but you can automate triggering a user presence touch quite efficiently. What you really need is a slow key generation alg for make credential. I suspect that this may not slow bots down as much as hoped.

It is an interesting experiment, but I agree with @herrjemandthat this is just too easy to automate. herrjemand.medium.com/why-cloudflare…

Great book by @IAMSimonMo on Identity and IAM! Highly recommend!

You can use WebAuthn now, it is the credential syncing via keychain that is in beta. theverge.com/2021/6/11/2252…

zdnet.com/article/micros…

#FIDO2 passwordless is a SINGLE STEP not SINGLE FACTOR medium.com/webauthnworks/…