Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
#fidcon WebAuthn, Next Stage - #idcon vol.29
Search
Nov Matake
October 12, 2022
Technology
0
2.2k
#fidcon WebAuthn, Next Stage - #idcon vol.29
Nov Matake
October 12, 2022
Tweet
Share
More Decks by Nov Matake
See All by Nov Matake
Passkey Autofill に賭けるマネーフォワード ID - Money Forward Tech Day 2024
nov
2
2.7k
OpenID Summit 2024 - Translation WG
nov
0
440
OpenID Summit 2024 - Panel : Celebrating Ten Years of OpenID Connect
nov
0
470
What’s Passkey @ AXIES 2023
nov
0
2.2k
NIST SP800-63C (rev.4) Federation & Assertions - OpenID BizDay #16
nov
0
68
Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID TechNight vol.17
nov
0
22
Sign in with Apple ~ diff from OIDC / OAuth 2.0 & characteristic identifiers design ~ - #idcon vol.27
nov
0
14
OAuth 2.0 & OpenID Connect 基礎 @ OpenID Meetup Fukuoka
nov
2
620
IIW #13 report at idcon #10
nov
2
70
Other Decks in Technology
See All in Technology
panicを深ぼってみる
kworkdev
PRO
2
150
ソフトウェア開発現代史:製造業とソフトウェアは本当に共存できていたのか?品質とスピードを問い直す
takabow
15
5.3k
MCP server を作って Claude Desktop アプリから kintone へアクセスすると楽しい
r3_yamauchi
PRO
1
120
【Λ(らむだ)】アップデート機能振り返りΛ編 / PADjp20250127
lambda
0
120
Enhancing SRE Using AI
yoshiiryo1
1
280
20250125_Agent for Amazon Bedrock試してみた
riz3f7
2
110
HCP TerraformとAzure:イオンスマートテクノロジーのインフラ革新 / HCP Terraform and Azure AEON Smart Technology's Infrastructure Innovation
aeonpeople
3
990
信頼性を支えるテレメトリーパイプラインの構築 / Building Telemetry Pipeline with OpenTelemetry
ymotongpoo
9
5k
インシデントキーメトリクスによるインシデント対応の改善 / Improving Incident Response using Incident Key Metrics
nari_ex
0
4.2k
CloudWatch Container Insightsを使ったAmazon ECSのリソース監視
umekou
1
120
もし今からGraphQLを採用するなら
kazukihayase
9
4.2k
地方企業がクラウドを活用するヒント
miu_crescent
PRO
1
110
Featured
See All Featured
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
192
16k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
11
900
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
45
2.3k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.3k
Being A Developer After 40
akosma
89
590k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.4k
The Invisible Side of Design
smashingmag
299
50k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
30
2.1k
Building Better People: How to give real-time feedback that sticks.
wjessup
366
19k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Designing for Performance
lara
604
68k
Statistics for Hackers
jakevdp
797
220k
Transcript
JEDPOWPM GJEDPO8FC"VUIO /FYU4UBHF Nov Matake
ϚωʔϑΥϫʔυࣾһʹͳͬͨͷͰձ ͕͑ΔΑ͏ʹͳͬͨΑʂࠓه೦ʹ KeynoteςϯϓϨϚωʔϑΥϫʔυ༷ Ͱʂ͜ΕࣗݾհςϯϓϨͩΑʂ ࣗݾհ ΠϯλϏϡʔͳͲʹ ͝ར༻͍ͩ͘͞
iOS, iPadOS, macOS ্Ͱͷ Passkey ࣮ʹ͍ͭͯ
Passkey on Apple Platforms iOS 16+ ͜ͷςϯϓϨͷ͜ͷཝʹ I have no
idea ԿΛೖΕͨΒ͍͍͔ what I should put here Α͘Θ͔ͬͯͳ͍Α in this template iPadOS 16+ macOS 13+
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/
after 1+ year of Technology Preview…
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/ WebAuthn Autofill
Passkey + Autofill = new WebAuthn UX
FIDO needs better UX than better security
Passkey Sync Demo
Autofill Demo
Problems Resolved
None
→ → →
None
Problems Remaining
https://github.com/w3c/webauthn/issues/1779 Display name (email address?) changes
None
...?
https://github.com/w3c/webauthn/issues/1793 Re-authentication with specifically allowed credentials
None
None
Sign-up w/ Autofill … not discussed yet?
None
None
...?
None
Are you happy with syncing Passkeys among multiple Windows /
Android…? and… ChromeOS?
Problems Arised
WebAuthn doesn’t work on office mac Unavailable on iCloud-KeyChain-disabled machines
(e.g., developer’s company Mac)
Conclusion
Passkey is awesome only for Apple freaks WebAuthn Autofill is
the game changer
Next game changer will be… Credential syncing between different platforms
POST /.well-known/webauthn-credentails like “POST /.well-known/change-password”
[APPENDIX] If WebAuthn UX is getting closer and closer to
Password Managers…
https://developer.apple.com/videos/play/wwdc2021/10106/