Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
#fidcon WebAuthn, Next Stage - #idcon vol.29
Search
Nov Matake
October 12, 2022
Technology
0
2.4k
#fidcon WebAuthn, Next Stage - #idcon vol.29
Nov Matake
October 12, 2022
Tweet
Share
More Decks by Nov Matake
See All by Nov Matake
Passkey Autofill に賭けるマネーフォワード ID - Money Forward Tech Day 2024
nov
2
3.6k
OpenID Summit 2024 - Translation WG
nov
0
500
OpenID Summit 2024 - Panel : Celebrating Ten Years of OpenID Connect
nov
0
540
What’s Passkey @ AXIES 2023
nov
0
2.4k
NIST SP800-63C (rev.4) Federation & Assertions - OpenID BizDay #16
nov
0
100
Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID TechNight vol.17
nov
0
57
Sign in with Apple ~ diff from OIDC / OAuth 2.0 & characteristic identifiers design ~ - #idcon vol.27
nov
0
23
OAuth 2.0 & OpenID Connect 基礎 @ OpenID Meetup Fukuoka
nov
2
670
IIW #13 report at idcon #10
nov
2
70
Other Decks in Technology
See All in Technology
新規プロダクトでプロトタイプから正式リリースまでNext.jsで開発したリアル
kawanoriku0
1
210
[ JAWS-UG 東京 CommunityBuilders Night #2 ]SlackとAmazon Q Developerで 運用効率化を模索する
sh_fk2
3
460
S3アクセス制御の設計ポイント
tommy0124
3
200
エンジニアリングマネージャーの成長の道筋とキャリア / Developers Summit 2025 KANSAI
daiksy
3
1.1k
EncryptedSharedPreferences が deprecated になっちゃった!どうしよう! / Oh no! EncryptedSharedPreferences has been deprecated! What should I do?
yanzm
0
490
「全員プロダクトマネージャー」を実現する、Cursorによる仕様検討の自動運転
applism118
22
12k
AI時代を生き抜くエンジニアキャリアの築き方 (AI-Native 時代、エンジニアという道は 「最大の挑戦の場」となる) / Building an Engineering Career to Thrive in the Age of AI (In the AI-Native Era, the Path of Engineering Becomes the Ultimate Arena of Challenge)
jeongjaesoon
0
250
共有と分離 - Compose Multiplatform "本番導入" の設計指針
error96num
2
1.2k
まずはマネコンでちゃちゃっと作ってから、それをCDKにしてみよか。
yamada_r
2
120
Snowflake×dbtを用いたテレシーのデータ基盤のこれまでとこれから
sagara
0
120
未経験者・初心者に贈る!40分でわかるAndroidアプリ開発の今と大事なポイント
operando
5
750
Rustから学ぶ 非同期処理の仕組み
skanehira
1
150
Featured
See All Featured
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
358
30k
Building a Scalable Design System with Sketch
lauravandoore
462
33k
Designing for humans not robots
tammielis
253
25k
VelocityConf: Rendering Performance Case Studies
addyosmani
332
24k
Product Roadmaps are Hard
iamctodd
PRO
54
11k
The Art of Delivering Value - GDevCon NA Keynote
reverentgeek
15
1.7k
Why Our Code Smells
bkeepers
PRO
339
57k
Java REST API Framework Comparison - PWX 2021
mraible
33
8.8k
The Language of Interfaces
destraynor
161
25k
Building Flexible Design Systems
yeseniaperezcruz
329
39k
Side Projects
sachag
455
43k
jQuery: Nuts, Bolts and Bling
dougneiner
64
7.9k
Transcript
JEDPOWPM GJEDPO8FC"VUIO /FYU4UBHF Nov Matake
ϚωʔϑΥϫʔυࣾһʹͳͬͨͷͰձ ͕͑ΔΑ͏ʹͳͬͨΑʂࠓه೦ʹ KeynoteςϯϓϨϚωʔϑΥϫʔυ༷ Ͱʂ͜ΕࣗݾհςϯϓϨͩΑʂ ࣗݾհ ΠϯλϏϡʔͳͲʹ ͝ར༻͍ͩ͘͞
iOS, iPadOS, macOS ্Ͱͷ Passkey ࣮ʹ͍ͭͯ
Passkey on Apple Platforms iOS 16+ ͜ͷςϯϓϨͷ͜ͷཝʹ I have no
idea ԿΛೖΕͨΒ͍͍͔ what I should put here Α͘Θ͔ͬͯͳ͍Α in this template iPadOS 16+ macOS 13+
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/
after 1+ year of Technology Preview…
https://developer.apple.com/videos/play/wwdc2021/10106/
https://developer.apple.com/videos/play/wwdc2021/10106/ WebAuthn Autofill
Passkey + Autofill = new WebAuthn UX
FIDO needs better UX than better security
Passkey Sync Demo
Autofill Demo
Problems Resolved
None
→ → →
None
Problems Remaining
https://github.com/w3c/webauthn/issues/1779 Display name (email address?) changes
None
...?
https://github.com/w3c/webauthn/issues/1793 Re-authentication with specifically allowed credentials
None
None
Sign-up w/ Autofill … not discussed yet?
None
None
...?
None
Are you happy with syncing Passkeys among multiple Windows /
Android…? and… ChromeOS?
Problems Arised
WebAuthn doesn’t work on office mac Unavailable on iCloud-KeyChain-disabled machines
(e.g., developer’s company Mac)
Conclusion
Passkey is awesome only for Apple freaks WebAuthn Autofill is
the game changer
Next game changer will be… Credential syncing between different platforms
POST /.well-known/webauthn-credentails like “POST /.well-known/change-password”
[APPENDIX] If WebAuthn UX is getting closer and closer to
Password Managers…
https://developer.apple.com/videos/play/wwdc2021/10106/