John Oltsik, NetworkWorld
What does this specification do? Simply stated, it provides standard protocols so that devices (like smart phones, tablets, PCs, IoT sensors, etc.) can easily participate in PKI infrastructure using just about any type of authentication technology as one of the factors. Don’t have a thumbprint reader on your phone? No problem. FIDO can find some other unique identifier (a TPM chip for example) and use this to create a key pair and act as the root of trust. Additionally, FIDO can create unique key pairs for different applications and services (i.e. Windows logon, Facebook, Paypal, etc.) and FIDO provides an abstraction layer so the actual private keys never leave the device and remain secure.
MORE FIDO in the News
Informatik aktuell: FIDO Passkeys 2 – in the future without a password
The FIDO Alliance is committed to making the Internet and...September 15, 2023
TechRadar: BitWarden adds passwordless SSO
Bitwarden has now added Single Sign-On (SSO) support for trusted...
Smashing Security: 339: Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?
Podcast episode where FIDO Passkeys are mentioned and linked to.