OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260

<p>We return to discussions of OAuth and all sorts of authentication. This time around we're looking at the design of authentication protocols, the kinds of trade-offs they weigh for adoption and security, and how a standard evolves over time to keep pace with new attacks and put to rest old mistakes.</p> <p>Segment resources:</p> <ul> <li><a rel="noopener" target="_blank" href= "https://fusionauth.io/docs/v1/tech/core-concepts/modes">https://fusionauth.io/docs/v1/tech/core-concepts/modes</a></li> <li><a rel="noopener" target="_blank" href= "https://webauthn.wtf/">https://webauthn.wtf/</a></li> <li><a rel="noopener" target="_blank" href= "https://datatracker.ietf.org/doc/html/rfc7636">https://datatracker.ietf.org/doc/html/rfc7636</a></li> <li><a rel="noopener" target="_blank" href= "https://www.ietf.org/about/participate/tao/">https://www.ietf.org/about/participate/tao/</a></li> </ul> <p>Show Notes: <a rel="noopener" target="_blank" href= "https://securityweekly.com/asw-260">https://securityweekly.com/asw-260</a></p>