3 ms·
The better option for employers is to just get rid of passwords and move to something like FIDO2.
by akerl_ 3y ago
The better option for employers is to just get rid of passwords and move to something like FIDO2.
- kemotep 3y agoPasskeys are still very rough around the edges and not widely supported but a first-class onboarding and management experience for public key cryptography as account passwords a la FIDO2, webauthn, and/or Passkeys will be amazing for solving the issues with phishing and weak passwords.
- akerl_ 3y agoThis is generally way easier for employers, since they can pick a FIDO2-enabled SSO platform, and then tie everything to that. So you don’t need each service to have sane FIDO2 support, you just need them to support SAML/OIDC/etc. You also get mostly out of the key management business, because you can say “if you get locked out, call the help desk”, vs personal usage where backup keys / account recovery requires a per-service recovery flow.
- pseufaux 3y agoCompletely agree, at least in an idealistic scenario.