According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator offers “the ability of the authentication protocol to detect and prevent disclosure of authentication secrets and valid authenticator outputs to an impostor relying party without reliance on the vigilance of the subscriber.” Two examples of phishing-resistant authenticators are PIV cards for US Federal employees and FIDO authenticators paired with W3C’s Web Authentication API for the private sector.


More

Ideem: Q/A with Andrew Shikiar, CEO of FIDO

We had the pleasure of sitting down with Andrew Shikiar, CEO of the FIDO Alliance known for…

Read More →

TechGenyz: Password-Free Future: How Biometrics & Passkeys Unlock True Security 

While biometrics offer convenience, passkeys provide the backbone for the next stage in authentication. Developed…

Read More →

Forbes: The iPhone’s New Camera? Whatever. The iPhone’s New Wallet? Cool. 

Apple’s approach to identity in wallets is built on open standards, including the W3C’s Digital…

Read More →