Live briefing
Everything about WebAuthn
Public-key authentication standard
Web Authentication (WebAuthn) is a web standard published by the World Wide Web Consortium (W3C). It defines an API that websites use to authenticate with WebAuthn credentials and outlines what WebAuthn authenticators should do. It solves many of the issues of traditional password-based authentication by verifying the user's identity with digital signatures. Although WebAuthn is often touted as a complete replacement for passwords, most websites that implement it continue to use passwords in some capacity. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: WebAuthnA 5-minute orientation
- Skim a recent paper: Ranljivosti pri implementaciji standarda WebAuthnInfluential work since 2022
- Read the landmark paper: Defeating FIDO2/CTAP2/WebAuthn using browser in the middle and reflected cross site scriptingCited 2 times
- Go sideways: PasskeyA closely related topic
- Go sideways: Client to Authenticator ProtocolA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Defeating FIDO2/CTAP2/WebAuthn using browser in the middle and reflected cross site scripting
USES OF WEBAUTHN PROTOCOL VULNERABILITIES TO OBTAIN UNSANCTIONED ACCESS
Implementation of FIDO2/Webauthn-Based Multi-Factor Authentication Module for E-Commerce Security on Prestashop
Comparing Multi-Factor Authentication Methods from SMS and TOTP to FIDO2/WebAuthn and Passkeys: A Qualitative Study of Practitioner Perspectives
Post-Quantum Security Enhancements for WebAuthn and FIDO2 Protocols
A deployment-aware multi-node FIDO2/WebAuthn authentication architecture for maritime information systems
Pemanfaatan Ekstensi PRF WebAuthn untuk Pembungkusan Kunci Privat Sisi Klien pada Penandatanganan Transaksi Offline Hyperledger Fabric Purwarupa dan Evaluasi Kelayakan
AuthM: A FIDO2/WebAuthn extension for hardware-free web authentication
🆕 Influential since 2022
📚 Books worth reading
Open Library didn't respond; try again in a moment.
🔗 Related topics
- Passkey A passkey, also known as security key, is a pair of cryptographic keys that is generated by a user's authenticator linked to an account to authenticate…
- Client to Authenticator Protocol The Client to Authenticator Protocol (CTAP) enables a roaming, user-controlled cryptographic authenticator (such as a smartphone or a hardware security…
- FIDO Alliance The FIDO (Fast IDentity Online) Alliance is an open industry association launched in February 2013 whose stated mission is to develop and promote authentication…
- Universal 2nd Factor Universal 2nd Factor (U2F) is an open standard that strengthens and simplifies two-factor authentication (2FA) using specialized Universal Serial Bus (USB)…
- Authenticator An authenticator is a means used to confirm a user's identity, that is, to perform digital authentication. A person authenticates to a computer system…
- YubiKey The YubiKey is a collection of hardware authentication devices manufactured by Yubico AB (Nasdaq Stockholm: YUBICO), a company founded in 2007 by Jakob…
- Credential Management Credential Management, also referred to as a Credential Management System (CMS), is an established form of software that is used for issuing and managing…
- Password manager A password manager is software that stores usernames and passwords in a collection called a password vault. The vault is intended to be encrypted, and…