February 14, 2014

Can the FIDO Alliance Help Obsolete Username Password Authentication?

John Oltsik, NetworkWorld

What does this specification do? Simply stated, it provides standard protocols so that devices (like smart phones, tablets, PCs, IoT sensors, etc.) can easily participate in PKI infrastructure using just about any type of authentication technology as one of the factors. Don’t have a thumbprint reader on your phone? No problem. FIDO can find some other unique identifier (a TPM chip for example) and use this to create a key pair and act as the root of trust. Additionally, FIDO can create unique key pairs for different applications and services (i.e. Windows logon, Facebook, Paypal, etc.) and FIDO provides an abstraction layer so the actual private keys never leave the device and remain secure.

MORE FIDO in the News


Brian Madden: How does FIDO work on non-certified devices (Apple devices)?

FIDO is the “hot thing” in identity and access management...

July 22, 2019

InfoSecurity Magazine: Authentication in the Age of GDPR

It’s been over a year since enforcement of the General...

July 19, 2019

PC World: The Online Security Game: How to be on the front foot against the opposition

Organizations can be on the offense when it comes to...

July 17, 2019

Kuppingercole: Passwordless for the Masses

Microsoft Azure AD support for FIDO may be the final...

July 12, 2019
Download Specs