Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Dark Reading: Passwords Use Alone Still Trumps Multi-Factor Authentication

Dark Reading reports on theJavelin Strategy & Research’s 2017 State of Authentication Report, commissioned by…

Read More →

New York Times: Google’s Key to Strong Password Protection Runs Into Limits

John Sabin, a former hacker for the National Security Agency, says Google’s Advanced Protection Program…

Read More →

Infosecurity: Strong Authentication Still Elusive for Businesses

According to a new Javelin Strategy & Research “2017 State of Authentication Report,” sponsored by…

Read More →