Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
#fidcon WebAuthn, Next Stage - #idcon vol.29
Search
Sponsored
·
Ship Features Fearlessly
Turn features on and off without deploys. Used by thousands of Ruby developers.
→
Nov Matake
October 12, 2022
Technology
0
2.5k
#fidcon WebAuthn, Next Stage - #idcon vol.29
Nov Matake
October 12, 2022
Tweet
Share
More Decks by Nov Matake
See All by Nov Matake
Passkey Autofill に賭けるマネーフォワード ID - Money Forward Tech Day 2024
nov
2
3.9k
OpenID Summit 2024 - Translation WG
nov
0
610
OpenID Summit 2024 - Panel : Celebrating Ten Years of OpenID Connect
nov
0
650
What’s Passkey @ AXIES 2023
nov
0
2.5k
NIST SP800-63C (rev.4) Federation & Assertions - OpenID BizDay #16
nov
0
130
Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID TechNight vol.17
nov
0
76
Sign in with Apple ~ diff from OIDC / OAuth 2.0 & characteristic identifiers design ~ - #idcon vol.27
nov
0
47
OAuth 2.0 & OpenID Connect 基礎 @ OpenID Meetup Fukuoka
nov
2
730
IIW #13 report at idcon #10
nov
2
86
Other Decks in Technology
See All in Technology
ハーネスエンジニアリング×AI適応開発
aictokamiya
1
780
来期の評価で変えようと思っていること 〜AI時代に変わること・変わらないこと〜
estie
0
120
昔話で振り返るAWSの歩み ~S3誕生から20年、クラウドはどう進化したのか~
nrinetcom
PRO
0
120
Even G2 クイックスタートガイド(日本語版)
vrshinobi1
0
130
OCI技術資料 : 証明書サービス概要
ocise
1
7.1k
AI時代のIssue駆動開発のススメ
moongift
PRO
0
300
「AIエージェントで変わる開発プロセス―レビューボトルネックからの脱却」
lycorptech_jp
PRO
0
190
JAWS DAYS 2026でAIの「もやっと」感が解消された話
smt7174
1
110
「通るまでRe-run」から卒業!落ちないテストを書く勘所
asumikam
3
850
Zephyr(RTOS)でARMとRISC-Vのコア間通信をしてみた
iotengineer22
0
100
AIエージェント時代に必要な オペレーションマネージャーのロールとは
kentarofujii
0
220
JEDAI認定プログラム JEDAI Order 2026 受賞者一覧 / JEDAI Order 2026 Winners
databricksjapan
0
400
Featured
See All Featured
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
techseoconnect
PRO
0
90
Performance Is Good for Brains [We Love Speed 2024]
tammyeverts
12
1.5k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
659
61k
Fantastic passwords and where to find them - at NoRuKo
philnash
52
3.6k
What’s in a name? Adding method to the madness
productmarketing
PRO
24
4k
AI: The stuff that nobody shows you
jnunemaker
PRO
4
500
Reality Check: Gamification 10 Years Later
codingconduct
0
2.1k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
133
19k
It's Worth the Effort
3n
188
29k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
mongodb
49
9.9k
Making Projects Easy
brettharned
120
6.6k
My Coaching Mixtape
mlcsv
0
87
Transcript
JEDPOWPM GJEDPO8FC"VUIO /FYU4UBHF Nov Matake
ϚωʔϑΥϫʔυࣾһʹͳͬͨͷͰձ ͕͑ΔΑ͏ʹͳͬͨΑʂࠓه೦ʹ KeynoteςϯϓϨϚωʔϑΥϫʔυ༷ Ͱʂ͜ΕࣗݾհςϯϓϨͩΑʂ ࣗݾհ ΠϯλϏϡʔͳͲʹ ͝ར༻͍ͩ͘͞
iOS, iPadOS, macOS ্Ͱͷ Passkey ࣮ʹ͍ͭͯ
Passkey on Apple Platforms iOS 16+ ͜ͷςϯϓϨͷ͜ͷཝʹ I have no
idea ԿΛೖΕͨΒ͍͍͔ what I should put here Α͘Θ͔ͬͯͳ͍Α in this template iPadOS 16+ macOS 13+
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/
after 1+ year of Technology Preview…
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/ WebAuthn Autofill
Passkey + Autofill = new WebAuthn UX
FIDO needs better UX than better security
Passkey Sync Demo
Autofill Demo
Problems Resolved
None
→ → →
None
Problems Remaining
https://github.com/w3c/webauthn/issues/1779 Display name (email address?) changes
None
...?
https://github.com/w3c/webauthn/issues/1793 Re-authentication with specifically allowed credentials
None
None
Sign-up w/ Autofill … not discussed yet?
None
None
...?
None
Are you happy with syncing Passkeys among multiple Windows /
Android…? and… ChromeOS?
Problems Arised
WebAuthn doesn’t work on office mac Unavailable on iCloud-KeyChain-disabled machines
(e.g., developer’s company Mac)
Conclusion
Passkey is awesome only for Apple freaks WebAuthn Autofill is
the game changer
Next game changer will be… Credential syncing between different platforms
POST /.well-known/webauthn-credentails like “POST /.well-known/change-password”
[APPENDIX] If WebAuthn UX is getting closer and closer to
Password Managers…
https://developer.apple.com/videos/play/wwdc2021/10106/