Insecurity protocols: an overview of modern authentication

Insecurity protocols: an overview of modern authentication Eric Chiang Security engineers that think JWTs are bad have never stared into the abyss of XML Digital Signatures. Come on a journey of modern auth protocols such as OpenID Connect, SAML, W...

Insecurity protocols: an overview of modern authentication

Eric Chiang

Security engineers that think JWTs are bad have never stared into the abyss of XML Digital Signatures. Come on a journey of modern auth protocols such as OpenID Connect, SAML, WebAuthn, TPMs, and TLS. What makes them good, when they go bad, and when complex protocols result in real CVEs.

https://bsidessf2024.sched.com/event/3059df2ba2676f42bcf0ee14a79935cd