Web Authentication

FIDO Token Binding Standard One Step Away From Official Publication

FIDO Token Binding Standard One Step Away From Official Publication

“…token binding is already being adopted by Google and Microsoft in their Chrome and Edge browsers, that is has been included in the OpenID Connect Enhanced Authentication Profile, and that it’s coming to US government authentication standards including NIST SP 800-63-3.” An important security specification developed by the FIDO Alliance is close to becoming finalized. The IETF…

New Version of Chrome Supports Fingerprint Authentication for Websites

New Version of Chrome Supports Fingerprint Authentication for Websites

A beta version of the latest Chrome browser for macOS and Android points to the rise of FIDO2-based biometric authentication on the web. The new Chrome 70 feature allows websites to access a fingerprint sensor on their device, and, as 9to5Google reports, this is enabled by default in the Web Authentication API. Websites that take…

W3C Announces Web Authentication Standards Project

W3C Announces Web Authentication Standards Project

The World Wide Web Consortium (W3C) has announced it is embarking on a project to establish Web Authentication standards based on FIDO Alliance specifications. In a statement announcing the effort, W3C Director Sir Tim Berners-Lee framed it as a response to the advancing security risks on the Internet, noting that “[w]ith the scope and frequency…