OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260

Application Security Weekly (Video)

We return to discussions of OAuth and all sorts of authentication. This time around we're looking at the design of authentication protocols, the kinds of trade-offs they weigh for adoption and security, and how a standard evolves over time to keep pace with new attacks and put to rest old mistakes.

Segment resources:

• https://fusionauth.io/docs/v1/tech/core-concepts/modes
• https://webauthn.wtf/
• https://datatracker.ietf.org/doc/html/rfc7636
• https://www.ietf.org/about/participate/tao/

Show Notes: https://securityweekly.com/asw-260