Feb 12 · 6 min read · If WebAuthn answers the question: “Can this device prove control of a credential right now?” OpenID Connect answers a different question entirely: “Who is this person across systems, time, and organizations?” Modern authentication systems fail wh...
Join discussion
Feb 8 · 6 min read · “Passwordless” has become one of those terms that everyone uses and few people define. Depending on who you ask, it can mean: logging in with Face ID, receiving a magic link by email, approving a push notification, using a security key, or never...
Join discussion
Feb 7 · 6 min read · Modern web applications are full of login screens — but surprisingly few of them have a well-designed authentication system. This distinction matters more than it sounds.If you treat authentication as a UI feature instead of a security system, every ...
Join discussion
Feb 1 · 4 min read · Passwords were never designed to scale with the modern web — and Progressive Web Apps inherit all of their weaknesses while adding new constraints of their own. This series explores how modern PWAs can move beyond passwords using FIDO-powered biometr...
Join discussion