Главная
Study mode:
on
1
Introduction
2
Who are we
3
Disclaimer
4
Agenda
5
Identity
6
What is Authentication
7
Common Authentication Issues
8
Authentication in the Ecosystem
9
Why are we here
10
Data Fear
11
Broken Authentication
12
General Authentication Issues
13
Approach
14
Outline
15
Token
16
Web Tokens
17
Web Token Example
18
OAuth
19
Best Case Scenario
20
Choose the Right Library
21
Check for the Right Algorithms
22
Mitigations
23
Session Tokens
24
Key Management
25
Key takeaways
26
OAuth primer
27
Token types
28
Token binding in action
29
Browser support
30
Pixie
31
OpenRedirect
32
Minimum Security Measures
33
Magic Links
34
The Workflow
35
Before the magic
36
SAML
37
Signatures
38
XML Passing
39
Empowering Developers
Description:
Explore a comprehensive conference talk on authentication best practices and common pitfalls. Learn about identity, authentication issues in ecosystems, and data security concerns. Dive into various authentication methods, including web tokens, OAuth, session tokens, and key management. Discover the importance of choosing the right libraries and algorithms for secure authentication. Gain insights into token binding, browser support, and minimum security measures. Understand the workflow of magic links and explore SAML signatures and XML passing. Empower yourself with knowledge to implement robust authentication systems and protect sensitive data.

Who dis? The Right Way To Authenticate

BSidesLV
Add to list