February 14, 2014

Can the FIDO Alliance Help Obsolete Username Password Authentication?

John Oltsik, NetworkWorld

What does this specification do? Simply stated, it provides standard protocols so that devices (like smart phones, tablets, PCs, IoT sensors, etc.) can easily participate in PKI infrastructure using just about any type of authentication technology as one of the factors. Don’t have a thumbprint reader on your phone? No problem. FIDO can find some other unique identifier (a TPM chip for example) and use this to create a key pair and act as the root of trust. Additionally, FIDO can create unique key pairs for different applications and services (i.e. Windows logon, Facebook, Paypal, etc.) and FIDO provides an abstraction layer so the actual private keys never leave the device and remain secure.

MORE FIDO in the News


The Inquirer: GitHub adds WebAuthn support for biometric and security key logins

GitHub now allows for login with WebAuthn, supporting security keys...

August 23, 2019

SecurityWeek: Ready or Not, Here Comes FIDO: How to Prepare for Success

As we move into a passwordless world, now is the...

August 21, 2019

PYMNTS: Google Moves Beyond The Password With Biometrics

PYMNTS spoke with Executive Director Andrew Shikiar on Google leveraging...

August 15, 2019

VentureBeat: Google Accounts now let Android web users authenticate themselves with their fingerprint

Google now allows user to sign into some services on...

August 12, 2019
Download Specs