Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

The Verge: Chrome and Firefox will support a new standard for password-free logins

In his reporting on the newly announced FIDO2 Project, The Verge reporter Russell Brandon predicts…

Read More →

Ars Technica: Practical passwordless authentication comes a step closer with WebAuthn

ArsTechnica reports that the World Wide Web Consortium (W3C) and FIDO Alliance announced that a…

Read More →

CNET: Password-free web security is coming to Chrome, Firefox, Edge

CNET reports that leading browsers Google Chrome, Mozilla Firefox and Microsoft Edge will support WebAuthn…

Read More →