Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Ruby meets passwordlress world

Ruby meets passwordlress world

5分のLTだったのでFIDO2のほぼ概要だけ。
実際のLTではrubygems.orgにパスワードレス認証入れてみるデモを見せました。

Takahiro Tsuchiya

June 08, 2019
Tweet

More Decks by Takahiro Tsuchiya

Other Decks in Technology

Transcript

  1. 3VCZNFFUT
    QBTTXPSEMFTT
    XPSME
    ໊ݹ԰3VCZձٞ

    ʢ౔ʣ
    5BLBIJSP5TVDIJZB!DPSPDO

    View full-size slide

  2. !DPSPDO
    ͜ΖͪΌΜ
    'SPNגࣜձࣾΩϟελʔ

    View full-size slide

  3. '*%0
    'BTU*%FOUJUZ0OMJOF

    View full-size slide

  4. ೝূثʢ"VUIFOUJDBUPSʣ
    Λ࢖ͬͨύεϫʔυΛ࢖Θͳ
    ͍ೝূن֨

    View full-size slide

  5. '*%0
    WebAuthn
    CTAP2

    View full-size slide

  6. 8FC"VUIFOUJDBUJPO"1*
    w IUUQTXXXXPSH53XFCBVUIO
    w ʹ΢Σϒඪ४ʢ3FDPNNFOEBUJPOʣ
    w ͓֮͑ͯ͘ͱಡΈ΍͍͢
    w "UUFTUBUJPOݤͷొ࿥ͷจ຺
    w "TTFSUJPOݤͷݕূͷจ຺

    View full-size slide

  7. ݤͷొ࿥ɾݕূϑϩʔ
    w छྨͷ"1*ʢϒϥ΢βଆʣ
    w OBWJHBUPSDSFEFOUJBMTDSFBUF PQUJPOT

    w OBWJHBUPSDSFEFOUJBMTHFU PQUJPOT


    PQUJPOTͷੜ੒
    DIBMMFOHFؚΉ

    8FC"VUIO"1*

    ݺͼग़͠ݤ৘ใΛऔಘ

    ݤͷݕূ
    ˠొ࿥PSೝূ

    View full-size slide

  8. (FNT
    w 8FC"VUIO
    w DFEBSDPEFXFCBVUIOSVCZ
    w HFNbXFCBVUIO`
    w OPWXFC@BVUIO
    w HFNbXFC@BVUIO`
    w $5"1
    w ͳͦ͞͏

    View full-size slide

  9. ςετͲ͏͠Α͏໰୊
    w &OEUP&OE
    w $POGPSNBODF5PPM
    w &MFDUSPO੡ͷπʔϧGSPN'*%0"MMJBODF
    w ΋͏͙͢$-*൛͕ͰΔ͔΋ʁ
    w 8FC"VUIO5FTU"1*
    w $ISPNFͷ"1*ɺ$BQZCBSBܦ༝
    w #BDLFOEʢ3VCZʣ
    w ୯ମςετͰ࢖͑ͦ͏ͳHFN͕ݟ౰ͨΒͳ͍
    w "VUIFOUJDBUPS&NVMBUPSॻ͜͏͔ͳ͊

    View full-size slide

  10. -5-FU`T5SZ
    ʢҰॹʹ΍Γ·͠ΐ͏ʣ

    View full-size slide