The problem today is that no agreed set of standards exists. We have widely disparate views of what these should be. Everybody has their own favourites. In one camp, we have people who believe the future is a completely new set of digital identity technologies: blockchains, DIDs, new cryptographic algorithms, and the DIDComm protocol stack (which is really little more than S/MIME with onion routing), and those like myself who believe we should build the verifiable credential digital identity eco-system on today’s existing ubiquitous standardised protocols and cryptography, such as X.509, OpenID Connect, W3C Web Authentication (FIDO2) and JWTs.
More FIDO in the News
Tech Target: Why 2023 is the year of passwordless authentication
Passwords are a form of knowledge-based authentication. For a user to prove they are who…
Forbes: Why MFA Falls Short And What Can Be Done About It
Stu Sjouwerman, founder, and CEO of KnowBe4 Inc shares his thoughts on how MFAs fell…
ars Technica: Phishers who breached Twilio and targeted Cloudflare could easily get you, too
At least two security-sensitive companies—Twilio and Cloudflare—were targeted in a phishing attack by an advanced…
Subscribe to the FIDO newsletter
Stay Connected, Stay Engaged
Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.
"*" indicates required fields
