“…token binding is already being adopted by Google and Microsoft in their Chrome and Edge browsers, that is has been included in the OpenID Connect Enhanced Authentication Profile, and that it’s coming to US government authentication standards including NIST SP 800-63-3.” An important security specification developed by the FIDO Alliance is close to becoming finalized. The IETF…
A beta version of the latest Chrome browser for macOS and Android points to the rise of FIDO2-based biometric authentication on the web. The new Chrome 70 feature allows websites to access a fingerprint sensor on their device, and, as 9to5Google reports, this is enabled by default in the Web Authentication API. Websites that take…
The World Wide Web Consortium (W3C) has announced it is embarking on a project to establish Web Authentication standards based on FIDO Alliance specifications. In a statement announcing the effort, W3C Director Sir Tim Berners-Lee framed it as a response to the advancing security risks on the Internet, noting that “[w]ith the scope and frequency…