Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

BangkokPost: Building trust in the age of data breaches

The Thai government should be considering industry-backed authentication such as FIDO to meet expectations for…

Read More →

BleepingComputer: Microsoft Azure AD FIDO2 Passwordless Sign-In in Public Preview

Microsoft has announced public preview support for FIDO2 security keys in Azure Active Directory to…

Read More →

Brian Madden: What I learned about identity management at Identiverse 2019

According to Brian Madden, FIDO2 and WebAuthn are the biggest buzz in identity today and…

Read More →