{"id":5125,"date":"2019-03-11T07:41:01","date_gmt":"2019-03-11T07:41:01","guid":{"rendered":"https:\/\/gtechbooster.com\/?p=5125"},"modified":"2023-04-01T01:36:53","modified_gmt":"2023-04-01T01:36:53","slug":"webauthn-now-official-standard","status":"publish","type":"post","link":"https:\/\/gtechbooster.com\/webauthn-now-official-standard\/","title":{"rendered":"WebAuthn now official standard"},"content":{"rendered":"\n

The World Wide Web Consortium (W3C) and the FIDO (Fast IDentity\nOnline) Alliance have announced that the Web Authentication\nspecification is now an official web standard.<\/p>\n\n\n

\"\"<\/a><\/div><\/div>

WebAuthn is a browser and platform standard for simpler and stronger authentication. Although it has only just been made official, it’s already supported in Windows 10, Android, and Chrome, Firefox, Edge and Safari browsers.<\/p>\n\n\n

Commenting on the new standard, W3C and FIDO said:<\/p>\n\n\n

“It’s common knowledge that passwords have outlived their efficacy. Not only are stolen, weak or default passwords behind 81 percent of data breaches, they are a drain of time and resources.”<\/em><\/p> W3C and FIDO <\/cite><\/blockquote>\n\n\n

WebAuthn means you can log into online accounts more securely using\nbiometrics, mobile devices, or FIDO security keys. WC3 is recommending\nthat web services and apps should turn on WebAuthn support to give users\n the option of logging in using biometrics, mobile devices or FIDO\nsecurity keys.<\/p>\n\n\n

Stolen, weak or default passwords behind an estimated 81 percent of\ndata breaches, and traditional multi-factor authentication (MFA)\nsolutions like SMS one-time codes are still vulnerable to phishing\nattacks, and suffer from low opt-in rates.<\/p>\n\n\n

This background is behind the move to FIDO2. This combines WebAuthn and FIDO\u2019s corresponding Client-to-Authenticator Protocol (CTAP).<\/p>\n\n\n

FIDO2 cryptographic login credentials are unique across every\nwebsite. The biometric information or more standard security info such\nas passwords never leave the user\u2019s device and are never stored on a\nserver. Users can log in with fingerprint readers, cameras, FIDO\nsecurity keys, or their personal mobile device.<\/p>\n\n\n

FIDO 2 also means that because the FIDO keys are unique for each Internet site, they cannot be used to track you across sites. Google announced in February that Android is now FIDO2-certified. For developers, enabling FIDO2 is a matter of a simple API call across all supported browsers and platforms. The FIDO Alliance has provided testing tools and launched a certification program.<\/p>\n\n\n

More Information<\/h4>\n\n\n