Difference between revisions of "FIDO U2F"

Revision as of 12:39, 30 August 2018

A family of standard^[1] for adding more factors to an existing interchange.

This spec is partially succeeded by Web Authentication.

Existing Authentication protocols based on a User Name and Password are insufficient in a world were so many Users depend on the internet for so much of their daily lives. The first attempt at Multi-factor Authentication was Smart Cards using X.509 certificates. This scheme worked for large Enterprises but was never accepted by regular Consumers of the internet.

Universal Serial Bus (USB) tokens are now widely available, most allow late binding of the user to the Web Site that requires this factor of Authentication.

"Why Johnny Doesn’t Use Two Factor: A Two-Phase Usability Study of the FIDO U2F Security Key" https://fc18.ifca.ai/preproceedings/111.pdf

Angelo Liao +1, Introducing Web Authentication in Microsoft Edge. (2018-07-30) Microsoft https://blogs.windows.com/msedgedev/2018/07/30/introducing-web-authentication-microsoft-edge/
Also see the page FIDO UAF for the Universal Authentication description.

@@ Line 6: / Line 6: @@
 ==Problems==
-Existing [[Authentication]] protocols based on a [[User Name]] and [[Password]] are insufficient in a world were so many [[User]]s depend on the internet for so much of their daily lives. The first attempt at [[Multi-factor Authentication]] was [[Smart Card]]s using [[X.509 certificates]]. This scheme worked for large [[Enterprise]]s but was never accepted by regular [[Consumer]]s of the internet.
+Existing [[Authentication]] protocols based on a [[User Name]] and [[Password]] are insufficient in a world were so many [[User]]s depend on the internet for so much of their daily lives. The first attempt at [[Multi-factor Authentication]] was [[Smart Card]]s using [[X.509 certificate]]s. This scheme worked for large [[Enterprise]]s but was never accepted by regular [[Consumer]]s of the internet.
 ==Solutions==