More than
What?
one of these.
Hardware
Delivery
Software
2FA Config-o-matic
2FA
When?
Second Factor
How
does it look
- During login.
- Before anaction.
- Part of signup.
Authentication
Why not
Options
to a
User?
Tim Lytle
Why?
Picked by users.
mean
Do it all?
Online here.
Trade-offs.
Works here.
Static.
Used to work here.
Can be forgotten.
[Let's take a look at some code.]
Can Services make this easier?
github.com/nexmo/ToDo-Web
Rate this talk
https://joind.in/talk/7dcb0
Delivery
Challenge
Algorithm
Service compares
Sent using a
Service sends a
to range of values.
Requires active
separate channel.
signed challenge.
internet
User provides
connection.
Service generates
device's code.
Result of seed
single use code.
+ time. (TOTP)
Device identifies
request.
Or seed +
counter. (HOTP)
Service verifies
Sibling
Returned over
codes match.
mobile app,
the authenticating
approving
Requires
channel.
Returns
web login.
synchronization.
signed response.
Computationally
expensive.
One secret
per application
or global.
But
does
Work?
how
it