The problem today is that no agreed set of standards exists. We have widely disparate views of what these should be. Everybody has their own favourites. In one camp, we have people who believe the future is a completely new set of digital identity technologies: blockchains, DIDs, new cryptographic algorithms, and the DIDComm protocol stack (which is really little more than S/MIME with onion routing), and those like myself who believe we should build the verifiable credential digital identity eco-system on today’s existing ubiquitous standardised protocols and cryptography, such as X.509, OpenID Connect, W3C Web Authentication (FIDO2) and JWTs.


More

Mobile ID World: New Batch of FIDO Certified Products Brings Total to 335

Mobile ID World reports that there are now more than 300 FIDO Certified products, showing…

Read More →

The Conversation: The age of hacking brings a return to the physical key

The Conversation explains how the FIDO standards can bolster security for access to online accounts.

Read More →

Secure ID News: Merging FIDO and PIV could help Feds achieve strong authentication goals

This story from Secure ID News covers a recent FIDO Alliance white paper that outlines…

Read More →