WEBVTT 00:00:02.600 --> 00:00:05.190 align:start position:0% <00:00:02.600>I <00:00:02.800>would <00:00:03.000>like <00:00:03.200>to <00:00:03.400>welcome <00:00:03.600>Martina <00:00:03.800>Kraus <00:00:04.000>on 00:00:05.190 --> 00:00:05.200 align:start position:0% <00:00:05.190>I <00:00:05.191>would <00:00:05.192>like <00:00:05.193>to <00:00:05.195>welcome <00:00:05.196>Martina <00:00:05.197>Kraus <00:00:05.199>on 00:00:05.200 --> 00:00:07.870 align:start position:0% <00:00:05.200>I <00:00:05.300>would <00:00:05.400>like <00:00:05.500>to <00:00:05.600>welcome <00:00:05.700>Martina <00:00:05.800>Kraus <00:00:05.900>on <00:00:06.000>the <00:00:06.100>stage. <00:00:06.200>Let's <00:00:06.300>have <00:00:06.400>a <00:00:06.500>round <00:00:06.600>of 00:00:07.870 --> 00:00:07.880 align:start position:0% <00:00:07.870>the <00:00:07.871>stage. <00:00:07.873>Let's <00:00:07.874>have <00:00:07.876>a <00:00:07.877>round <00:00:07.879>of 00:00:07.880 --> 00:00:12.435 align:start position:0% <00:00:07.880>the <00:00:08.007>stage. <00:00:08.134>Let's <00:00:08.261>have <00:00:08.389>a <00:00:08.516>round <00:00:08.643>of <00:00:08.770>applause <00:00:08.898>for <00:00:09.025>her. <00:00:09.152>Thank <00:00:09.280>you. 00:00:12.445 --> 00:00:16.910 align:start position:0% <00:00:12.445>>> <00:00:13.845>[music] 00:00:16.920 --> 00:00:18.470 align:start position:0% <00:00:16.920>>> <00:00:17.385>Yes, <00:00:17.850>amazing. <00:00:18.314>[music] 00:00:18.470 --> 00:00:18.480 align:start position:0% <00:00:18.470>>> <00:00:18.473>Yes, <00:00:18.476>amazing. <00:00:18.479>[music] 00:00:18.480 --> 00:00:19.670 align:start position:0% <00:00:18.480>>> <00:00:18.587>Yes, <00:00:18.694>amazing. <00:00:18.801>[music] <00:00:18.908>Thank <00:00:19.015>you <00:00:19.122>so <00:00:19.229>much <00:00:19.336>for <00:00:19.443>the <00:00:19.551>nice 00:00:19.670 --> 00:00:19.680 align:start position:0% <00:00:19.670>Thank <00:00:19.671>you <00:00:19.673>so <00:00:19.674>much <00:00:19.676>for <00:00:19.677>the <00:00:19.679>nice 00:00:19.680 --> 00:00:21.950 align:start position:0% <00:00:19.680>Thank <00:00:19.807>you <00:00:19.934>so <00:00:20.061>much <00:00:20.189>for <00:00:20.316>the <00:00:20.443>nice <00:00:20.570>introduction. <00:00:20.698>It's <00:00:20.825>actually <00:00:20.952>a <00:00:21.080>great 00:00:21.950 --> 00:00:21.960 align:start position:0% <00:00:21.950>introduction. <00:00:21.952>It's <00:00:21.954>actually <00:00:21.956>a <00:00:21.959>great 00:00:21.960 --> 00:00:24.590 align:start position:0% <00:00:21.960>introduction. <00:00:22.100>It's <00:00:22.240>actually <00:00:22.380>a <00:00:22.520>great <00:00:22.660>honor <00:00:22.800>for <00:00:22.940>me <00:00:23.080>to <00:00:23.220>be <00:00:23.360>here. 00:00:24.590 --> 00:00:24.600 align:start position:0% <00:00:24.590>honor <00:00:24.591>for <00:00:24.593>me <00:00:24.595>to <00:00:24.597>be <00:00:24.599>here. 00:00:24.600 --> 00:00:27.790 align:start position:0% <00:00:24.600>honor <00:00:24.707>for <00:00:24.815>me <00:00:24.923>to <00:00:25.030>be <00:00:25.138>here. <00:00:25.246>Um, <00:00:25.353>first <00:00:25.461>question <00:00:25.569>of <00:00:25.676>all, <00:00:25.784>who <00:00:25.892>of <00:00:26.000>you 00:00:27.790 --> 00:00:27.800 align:start position:0% <00:00:27.790>Um, <00:00:27.791>first <00:00:27.792>question <00:00:27.793>of <00:00:27.795>all, <00:00:27.796>who <00:00:27.797>of <00:00:27.799>you 00:00:27.800 --> 00:00:29.910 align:start position:0% <00:00:27.800>Um, <00:00:27.907>first <00:00:28.015>question <00:00:28.123>of <00:00:28.230>all, <00:00:28.338>who <00:00:28.446>of <00:00:28.553>you <00:00:28.661>have <00:00:28.769>already <00:00:28.876>passed <00:00:28.984>passkeys <00:00:29.092>and <00:00:29.200>use 00:00:29.910 --> 00:00:29.920 align:start position:0% <00:00:29.910>have <00:00:29.911>already <00:00:29.913>passed <00:00:29.915>passkeys <00:00:29.917>and <00:00:29.919>use 00:00:29.920 --> 00:00:31.390 align:start position:0% <00:00:29.920>have <00:00:30.140>already <00:00:30.361>passed <00:00:30.581>passkeys <00:00:30.802>and <00:00:31.022>use <00:00:31.243>passkeys? 00:00:31.390 --> 00:00:31.400 align:start position:0% passkeys? 00:00:31.400 --> 00:00:33.470 align:start position:0% <00:00:31.400>passkeys? <00:00:31.633>Yes, <00:00:31.866>that's <00:00:32.100>great. <00:00:32.333>I <00:00:32.566>really <00:00:32.800>hope 00:00:33.470 --> 00:00:33.480 align:start position:0% <00:00:33.470>Yes, <00:00:33.471>that's <00:00:33.473>great. <00:00:33.475>I <00:00:33.477>really <00:00:33.479>hope 00:00:33.480 --> 00:00:35.990 align:start position:0% <00:00:33.480>Yes, <00:00:33.607>that's <00:00:33.734>great. <00:00:33.861>I <00:00:33.989>really <00:00:34.116>hope <00:00:34.243>afterwards <00:00:34.370>you <00:00:34.498>also <00:00:34.625>learn <00:00:34.752>to <00:00:34.879>implement 00:00:35.990 --> 00:00:36.000 align:start position:0% <00:00:35.990>afterwards <00:00:35.991>you <00:00:35.993>also <00:00:35.995>learn <00:00:35.997>to <00:00:35.999>implement 00:00:36.000 --> 00:00:39.110 align:start position:0% <00:00:36.000>afterwards <00:00:36.140>you <00:00:36.280>also <00:00:36.420>learn <00:00:36.560>to <00:00:36.700>implement <00:00:36.840>and <00:00:36.980>to <00:00:37.120>implement <00:00:37.260>them <00:00:37.400>correctly 00:00:39.110 --> 00:00:39.120 align:start position:0% <00:00:39.110>and <00:00:39.112>to <00:00:39.114>implement <00:00:39.116>them <00:00:39.119>correctly 00:00:39.120 --> 00:00:40.870 align:start position:0% <00:00:39.120>and <00:00:39.260>to <00:00:39.400>implement <00:00:39.540>them <00:00:39.680>correctly <00:00:39.820>to <00:00:39.959>make <00:00:40.099>them, <00:00:40.239>of <00:00:40.379>course, <00:00:40.519>phishing 00:00:40.870 --> 00:00:40.880 align:start position:0% <00:00:40.870>to <00:00:40.871>make <00:00:40.873>them, <00:00:40.875>of <00:00:40.877>course, <00:00:40.879>phishing 00:00:40.880 --> 00:00:43.310 align:start position:0% <00:00:40.880>to <00:00:41.007>make <00:00:41.134>them, <00:00:41.261>of <00:00:41.389>course, <00:00:41.516>phishing <00:00:41.643>resistant. <00:00:41.770>Or <00:00:41.898>maybe <00:00:42.025>they <00:00:42.152>are <00:00:42.280>already 00:00:43.310 --> 00:00:43.320 align:start position:0% <00:00:43.310>resistant. <00:00:43.311>Or <00:00:43.313>maybe <00:00:43.315>they <00:00:43.317>are <00:00:43.319>already 00:00:43.320 --> 00:00:45.630 align:start position:0% <00:00:43.320>resistant. <00:00:43.447>Or <00:00:43.574>maybe <00:00:43.701>they <00:00:43.829>are <00:00:43.956>already <00:00:44.083>phishing <00:00:44.210>resistant <00:00:44.338>by <00:00:44.465>default. <00:00:44.592>So, <00:00:44.720>when 00:00:45.630 --> 00:00:45.640 align:start position:0% <00:00:45.630>phishing <00:00:45.631>resistant <00:00:45.633>by <00:00:45.635>default. <00:00:45.637>So, <00:00:45.639>when 00:00:45.640 --> 00:00:47.150 align:start position:0% <00:00:45.640>phishing <00:00:45.753>resistant <00:00:45.866>by <00:00:45.979>default. <00:00:46.093>So, <00:00:46.206>when <00:00:46.319>we <00:00:46.432>talk <00:00:46.546>about <00:00:46.659>phishing, <00:00:46.772>I <00:00:46.885>guess <00:00:46.998>every 00:00:47.150 --> 00:00:47.160 align:start position:0% <00:00:47.150>we <00:00:47.151>talk <00:00:47.153>about <00:00:47.154>phishing, <00:00:47.156>I <00:00:47.157>guess <00:00:47.159>every 00:00:47.160 --> 00:00:50.390 align:start position:0% <00:00:47.160>we <00:00:47.267>talk <00:00:47.375>about <00:00:47.483>phishing, <00:00:47.590>I <00:00:47.698>guess <00:00:47.806>every <00:00:47.913>one <00:00:48.021>of <00:00:48.129>you <00:00:48.236>can <00:00:48.344>somehow <00:00:48.452>imagine <00:00:48.559>what 00:00:50.390 --> 00:00:50.400 align:start position:0% <00:00:50.390>one <00:00:50.391>of <00:00:50.393>you <00:00:50.394>can <00:00:50.396>somehow <00:00:50.397>imagine <00:00:50.399>what 00:00:50.400 --> 00:00:53.470 align:start position:0% <00:00:50.400>one <00:00:50.493>of <00:00:50.586>you <00:00:50.680>can <00:00:50.773>somehow <00:00:50.866>imagine <00:00:50.960>what <00:00:51.053>phishing <00:00:51.146>is. <00:00:51.239>We <00:00:51.333>trick <00:00:51.426>a <00:00:51.519>user <00:00:51.613>to <00:00:51.706>click <00:00:51.800>on 00:00:53.470 --> 00:00:53.480 align:start position:0% <00:00:53.470>phishing <00:00:53.471>is. <00:00:53.472>We <00:00:53.473>trick <00:00:53.474>a <00:00:53.475>user <00:00:53.476>to <00:00:53.477>click <00:00:53.479>on 00:00:53.480 --> 00:00:56.230 align:start position:0% <00:00:53.480>phishing <00:00:53.573>is. <00:00:53.666>We <00:00:53.760>trick <00:00:53.853>a <00:00:53.946>user <00:00:54.040>to <00:00:54.133>click <00:00:54.226>on <00:00:54.319>a <00:00:54.413>link <00:00:54.506>by <00:00:54.599>social <00:00:54.693>engineering <00:00:54.786>or <00:00:54.879>email. 00:00:56.230 --> 00:00:56.240 align:start position:0% <00:00:56.230>a <00:00:56.231>link <00:00:56.233>by <00:00:56.234>social <00:00:56.236>engineering <00:00:56.237>or <00:00:56.239>email. 00:00:56.240 --> 00:00:58.550 align:start position:0% <00:00:56.240>a <00:00:56.340>link <00:00:56.440>by <00:00:56.540>social <00:00:56.640>engineering <00:00:56.740>or <00:00:56.840>email. <00:00:56.940>Of <00:00:57.040>course, <00:00:57.140>AI <00:00:57.240>helps <00:00:57.340>a <00:00:57.440>little <00:00:57.540>bit <00:00:57.640>making 00:00:58.550 --> 00:00:58.560 align:start position:0% <00:00:58.550>Of <00:00:58.551>course, <00:00:58.552>AI <00:00:58.553>helps <00:00:58.555>a <00:00:58.556>little <00:00:58.557>bit <00:00:58.559>making 00:00:58.560 --> 00:01:01.030 align:start position:0% <00:00:58.560>Of <00:00:58.667>course, <00:00:58.775>AI <00:00:58.883>helps <00:00:58.990>a <00:00:59.098>little <00:00:59.206>bit <00:00:59.313>making <00:00:59.421>this <00:00:59.529>easier <00:00:59.636>to <00:00:59.744>create <00:00:59.852>authentic <00:00:59.960>emails. 00:01:01.030 --> 00:01:01.040 align:start position:0% <00:01:01.030>this <00:01:01.031>easier <00:01:01.033>to <00:01:01.035>create <00:01:01.037>authentic <00:01:01.039>emails. 00:01:01.040 --> 00:01:03.470 align:start position:0% <00:01:01.040>this <00:01:01.147>easier <00:01:01.255>to <00:01:01.363>create <00:01:01.470>authentic <00:01:01.578>emails. <00:01:01.686>And <00:01:01.793>then <00:01:01.901>we <00:01:02.009>need <00:01:02.116>to <00:01:02.224>somehow <00:01:02.332>figure <00:01:02.440>out 00:01:03.470 --> 00:01:03.480 align:start position:0% <00:01:03.470>And <00:01:03.471>then <00:01:03.472>we <00:01:03.473>need <00:01:03.475>to <00:01:03.476>somehow <00:01:03.477>figure <00:01:03.479>out 00:01:03.480 --> 00:01:05.470 align:start position:0% <00:01:03.480>And <00:01:03.573>then <00:01:03.666>we <00:01:03.760>need <00:01:03.853>to <00:01:03.946>somehow <00:01:04.039>figure <00:01:04.133>out <00:01:04.226>is <00:01:04.319>this <00:01:04.413>the <00:01:04.506>right <00:01:04.599>origin, <00:01:04.693>is <00:01:04.786>this <00:01:04.879>the 00:01:05.470 --> 00:01:05.480 align:start position:0% <00:01:05.470>is <00:01:05.471>this <00:01:05.472>the <00:01:05.473>right <00:01:05.475>origin, <00:01:05.476>is <00:01:05.477>this <00:01:05.479>the 00:01:05.480 --> 00:01:08.630 align:start position:0% <00:01:05.480>is <00:01:05.580>this <00:01:05.680>the <00:01:05.780>right <00:01:05.880>origin, <00:01:05.980>is <00:01:06.080>this <00:01:06.180>the <00:01:06.280>right <00:01:06.380>URL, <00:01:06.480>and <00:01:06.580>the <00:01:06.680>username. <00:01:06.780>User <00:01:06.880>just 00:01:08.630 --> 00:01:08.640 align:start position:0% <00:01:08.630>right <00:01:08.631>URL, <00:01:08.633>and <00:01:08.634>the <00:01:08.636>username. <00:01:08.637>User <00:01:08.639>just 00:01:08.640 --> 00:01:10.350 align:start position:0% <00:01:08.640>right <00:01:08.756>URL, <00:01:08.873>and <00:01:08.990>the <00:01:09.106>username. <00:01:09.223>User <00:01:09.340>just <00:01:09.456>types <00:01:09.573>really <00:01:09.690>the <00:01:09.806>username <00:01:09.923>and <00:01:10.040>password 00:01:10.350 --> 00:01:10.360 align:start position:0% <00:01:10.350>types <00:01:10.351>really <00:01:10.353>the <00:01:10.355>username <00:01:10.357>and <00:01:10.359>password 00:01:10.360 --> 00:01:12.470 align:start position:0% <00:01:10.360>types <00:01:10.476>really <00:01:10.593>the <00:01:10.710>username <00:01:10.826>and <00:01:10.943>password <00:01:11.060>inside. <00:01:11.176>And <00:01:11.293>then, <00:01:11.410>of <00:01:11.526>course, <00:01:11.643>bear <00:01:11.760>my 00:01:12.470 --> 00:01:12.480 align:start position:0% <00:01:12.470>inside. <00:01:12.471>And <00:01:12.473>then, <00:01:12.474>of <00:01:12.476>course, <00:01:12.477>bear <00:01:12.479>my 00:01:12.480 --> 00:01:14.470 align:start position:0% <00:01:12.480>inside. <00:01:12.580>And <00:01:12.680>then, <00:01:12.780>of <00:01:12.880>course, <00:01:12.980>bear <00:01:13.080>my <00:01:13.180>have <00:01:13.280>the <00:01:13.380>username <00:01:13.480>and <00:01:13.580>password <00:01:13.680>of <00:01:13.780>a <00:01:13.880>user 00:01:14.470 --> 00:01:14.480 align:start position:0% <00:01:14.470>have <00:01:14.471>the <00:01:14.472>username <00:01:14.473>and <00:01:14.475>password <00:01:14.476>of <00:01:14.477>a <00:01:14.479>user 00:01:14.480 --> 00:01:15.950 align:start position:0% <00:01:14.480>have <00:01:14.574>the <00:01:14.669>username <00:01:14.763>and <00:01:14.858>password <00:01:14.952>of <00:01:15.047>a <00:01:15.141>user <00:01:15.236>since <00:01:15.330>this <00:01:15.425>is <00:01:15.519>not <00:01:15.614>the <00:01:15.708>origin <00:01:15.803>it's 00:01:15.950 --> 00:01:15.960 align:start position:0% <00:01:15.950>since <00:01:15.951>this <00:01:15.953>is <00:01:15.954>not <00:01:15.956>the <00:01:15.957>origin <00:01:15.959>it's 00:01:15.960 --> 00:01:17.590 align:start position:0% <00:01:15.960>since <00:01:16.115>this <00:01:16.271>is <00:01:16.426>not <00:01:16.582>the <00:01:16.737>origin <00:01:16.893>it's <00:01:17.048>supposed <00:01:17.204>to <00:01:17.360>be. 00:01:17.590 --> 00:01:17.600 align:start position:0% <00:01:17.590>supposed <00:01:17.594>to <00:01:17.598>be. 00:01:17.600 --> 00:01:19.390 align:start position:0% <00:01:17.600>supposed <00:01:18.066>to <00:01:18.533>be. <00:01:19.000>So, 00:01:19.390 --> 00:01:19.400 align:start position:0% So, 00:01:19.400 --> 00:01:21.910 align:start position:0% <00:01:19.400>So, <00:01:19.575>the <00:01:19.750>other <00:01:19.925>thing <00:01:20.100>is <00:01:20.275>that <00:01:20.450>I <00:01:20.625>claim <00:01:20.800>that 00:01:21.910 --> 00:01:21.920 align:start position:0% <00:01:21.910>the <00:01:21.911>other <00:01:21.912>thing <00:01:21.913>is <00:01:21.915>that <00:01:21.916>I <00:01:21.917>claim <00:01:21.919>that 00:01:21.920 --> 00:01:24.990 align:start position:0% <00:01:21.920>the <00:01:22.020>other <00:01:22.120>thing <00:01:22.220>is <00:01:22.320>that <00:01:22.420>I <00:01:22.520>claim <00:01:22.620>that <00:01:22.720>passkeys <00:01:22.820>make <00:01:22.920>now <00:01:23.020>these <00:01:23.120>kind <00:01:23.220>of <00:01:23.320>phishing 00:01:24.990 --> 00:01:25.000 align:start position:0% <00:01:24.990>passkeys <00:01:24.991>make <00:01:24.993>now <00:01:24.994>these <00:01:24.996>kind <00:01:24.997>of <00:01:24.999>phishing 00:01:25.000 --> 00:01:27.790 align:start position:0% <00:01:25.000>passkeys <00:01:25.116>make <00:01:25.233>now <00:01:25.350>these <00:01:25.466>kind <00:01:25.583>of <00:01:25.700>phishing <00:01:25.816>attacks <00:01:25.933>impossible. <00:01:26.050>But, <00:01:26.166>of <00:01:26.283>course, <00:01:26.400>what 00:01:27.790 --> 00:01:27.800 align:start position:0% <00:01:27.789>attacks <00:01:27.791>impossible. <00:01:27.793>But, <00:01:27.795>of <00:01:27.797>course, <00:01:27.798>what 00:01:27.800 --> 00:01:30.350 align:start position:0% <00:01:27.800>attacks <00:01:27.899>impossible. <00:01:28.000>But, <00:01:28.100>of <00:01:28.200>course, <00:01:28.300>what <00:01:28.399>we <00:01:28.500>are <00:01:28.600>doing <00:01:28.700>so <00:01:28.800>far, <00:01:28.899>we <00:01:29.000>are <00:01:29.100>giving <00:01:29.200>away 00:01:30.350 --> 00:01:30.360 align:start position:0% <00:01:30.350>we <00:01:30.351>are <00:01:30.352>doing <00:01:30.353>so <00:01:30.354>far, <00:01:30.355>we <00:01:30.356>are <00:01:30.357>giving <00:01:30.359>away 00:01:30.360 --> 00:01:33.830 align:start position:0% <00:01:30.360>we <00:01:30.453>are <00:01:30.546>doing <00:01:30.640>so <00:01:30.733>far, <00:01:30.826>we <00:01:30.920>are <00:01:31.013>giving <00:01:31.106>away <00:01:31.200>millions <00:01:31.293>of <00:01:31.386>euros <00:01:31.480>and <00:01:31.573>money <00:01:31.666>to <00:01:31.760>create 00:01:33.830 --> 00:01:33.840 align:start position:0% <00:01:33.830>millions <00:01:33.831>of <00:01:33.833>euros <00:01:33.834>and <00:01:33.836>money <00:01:33.837>to <00:01:33.839>create 00:01:33.840 --> 00:01:36.390 align:start position:0% <00:01:33.840>millions <00:01:33.956>of <00:01:34.073>euros <00:01:34.190>and <00:01:34.306>money <00:01:34.423>to <00:01:34.540>create <00:01:34.656>awareness <00:01:34.773>trainings <00:01:34.890>to <00:01:35.006>tell <00:01:35.123>user, <00:01:35.240>oh 00:01:36.390 --> 00:01:36.400 align:start position:0% <00:01:36.390>awareness <00:01:36.391>trainings <00:01:36.393>to <00:01:36.395>tell <00:01:36.397>user, <00:01:36.399>oh 00:01:36.400 --> 00:01:38.750 align:start position:0% <00:01:36.400>awareness <00:01:36.507>trainings <00:01:36.615>to <00:01:36.723>tell <00:01:36.830>user, <00:01:36.938>oh <00:01:37.046>yes, <00:01:37.153>this <00:01:37.261>is <00:01:37.369>a <00:01:37.476>correct <00:01:37.584>link <00:01:37.692>and <00:01:37.800>this 00:01:38.750 --> 00:01:38.760 align:start position:0% <00:01:38.750>yes, <00:01:38.751>this <00:01:38.752>is <00:01:38.753>a <00:01:38.755>correct <00:01:38.756>link <00:01:38.757>and <00:01:38.758>this 00:01:38.760 --> 00:01:40.790 align:start position:0% <00:01:38.759>yes, <00:01:38.853>this <00:01:38.946>is <00:01:39.039>a <00:01:39.133>correct <00:01:39.226>link <00:01:39.320>and <00:01:39.413>this <00:01:39.506>isn't <00:01:39.600>one. <00:01:39.693>It's <00:01:39.786>like, <00:01:39.880>you <00:01:39.973>know, <00:01:40.066>I <00:01:40.160>always 00:01:40.790 --> 00:01:40.800 align:start position:0% <00:01:40.789>isn't <00:01:40.791>one. <00:01:40.792>It's <00:01:40.793>like, <00:01:40.795>you <00:01:40.796>know, <00:01:40.797>I <00:01:40.798>always 00:01:40.800 --> 00:01:42.830 align:start position:0% <00:01:40.800>isn't <00:01:40.893>one. <00:01:40.986>It's <00:01:41.080>like, <00:01:41.173>you <00:01:41.266>know, <00:01:41.360>I <00:01:41.453>always <00:01:41.546>compare <00:01:41.640>this <00:01:41.733>to <00:01:41.826>when <00:01:41.920>you <00:01:42.013>have <00:01:42.106>a <00:01:42.200>house 00:01:42.830 --> 00:01:42.840 align:start position:0% <00:01:42.830>compare <00:01:42.831>this <00:01:42.832>to <00:01:42.833>when <00:01:42.835>you <00:01:42.836>have <00:01:42.837>a <00:01:42.839>house 00:01:42.840 --> 00:01:43.990 align:start position:0% <00:01:42.840>compare <00:01:42.913>this <00:01:42.987>to <00:01:43.061>when <00:01:43.135>you <00:01:43.209>have <00:01:43.283>a <00:01:43.357>house <00:01:43.431>and <00:01:43.505>you <00:01:43.579>have <00:01:43.653>some <00:01:43.727>different <00:01:43.801>kind <00:01:43.875>of 00:01:43.990 --> 00:01:44.000 align:start position:0% <00:01:43.990>and <00:01:43.991>you <00:01:43.993>have <00:01:43.994>some <00:01:43.996>different <00:01:43.997>kind <00:01:43.999>of 00:01:44.000 --> 00:01:46.950 align:start position:0% <00:01:44.000>and <00:01:44.100>you <00:01:44.200>have <00:01:44.300>some <00:01:44.400>different <00:01:44.500>kind <00:01:44.600>of <00:01:44.700>switches. <00:01:44.800>We <00:01:44.900>need <00:01:45.000>to <00:01:45.100>train <00:01:45.200>the <00:01:45.300>users <00:01:45.400>to 00:01:46.950 --> 00:01:46.960 align:start position:0% <00:01:46.950>switches. <00:01:46.951>We <00:01:46.952>need <00:01:46.953>to <00:01:46.955>train <00:01:46.956>the <00:01:46.957>users <00:01:46.959>to 00:01:46.960 --> 00:01:50.070 align:start position:0% <00:01:46.960>switches. <00:01:47.042>We <00:01:47.124>need <00:01:47.207>to <00:01:47.289>train <00:01:47.371>the <00:01:47.454>users <00:01:47.536>to <00:01:47.618>make <00:01:47.701>a <00:01:47.783>hole <00:01:47.865>in <00:01:47.948>the <00:01:48.030>wall <00:01:48.112>and <00:01:48.195>and <00:01:48.277>read <00:01:48.360>the 00:01:50.070 --> 00:01:50.080 align:start position:0% <00:01:50.070>make <00:01:50.071>a <00:01:50.071>hole <00:01:50.073>in <00:01:50.074>the <00:01:50.075>wall <00:01:50.076>and <00:01:50.077>and <00:01:50.078>read <00:01:50.079>the 00:01:50.080 --> 00:01:52.790 align:start position:0% <00:01:50.080>make <00:01:50.167>a <00:01:50.255>hole <00:01:50.342>in <00:01:50.429>the <00:01:50.517>wall <00:01:50.605>and <00:01:50.692>and <00:01:50.780>read <00:01:50.867>the <00:01:50.955>electricity <00:01:51.042>to <00:01:51.130>tell <00:01:51.217>them, <00:01:51.304>hey <00:01:51.392>yeah, <00:01:51.480>this 00:01:52.790 --> 00:01:52.800 align:start position:0% <00:01:52.789>electricity <00:01:52.791>to <00:01:52.792>tell <00:01:52.794>them, <00:01:52.795>hey <00:01:52.797>yeah, <00:01:52.798>this 00:01:52.800 --> 00:01:54.590 align:start position:0% <00:01:52.800>electricity <00:01:52.899>to <00:01:53.000>tell <00:01:53.100>them, <00:01:53.200>hey <00:01:53.300>yeah, <00:01:53.399>this <00:01:53.500>this <00:01:53.600>is <00:01:53.700>actually <00:01:53.800>a <00:01:53.899>switch <00:01:54.000>you <00:01:54.100>can <00:01:54.200>turn 00:01:54.590 --> 00:01:54.600 align:start position:0% <00:01:54.590>this <00:01:54.591>is <00:01:54.592>actually <00:01:54.593>a <00:01:54.595>switch <00:01:54.596>you <00:01:54.597>can <00:01:54.598>turn 00:01:54.600 --> 00:01:56.630 align:start position:0% <00:01:54.600>this <00:01:54.699>is <00:01:54.800>actually <00:01:54.899>a <00:01:55.000>switch <00:01:55.100>you <00:01:55.199>can <00:01:55.300>turn <00:01:55.399>on. <00:01:55.500>This <00:01:55.600>is <00:01:55.699>really <00:01:55.800>secure. <00:01:55.899>This <00:01:56.000>is 00:01:56.630 --> 00:01:56.640 align:start position:0% <00:01:56.630>on. <00:01:56.631>This <00:01:56.633>is <00:01:56.634>really <00:01:56.636>secure. <00:01:56.637>This <00:01:56.639>is 00:01:56.640 --> 00:01:58.830 align:start position:0% <00:01:56.640>on. <00:01:56.747>This <00:01:56.855>is <00:01:56.963>really <00:01:57.070>secure. <00:01:57.178>This <00:01:57.286>is <00:01:57.393>really <00:01:57.501>kind <00:01:57.609>of <00:01:57.716>insane. <00:01:57.824>But <00:01:57.932>the <00:01:58.040>second 00:01:58.830 --> 00:01:58.840 align:start position:0% <00:01:58.830>really <00:01:58.831>kind <00:01:58.833>of <00:01:58.834>insane. <00:01:58.836>But <00:01:58.837>the <00:01:58.839>second 00:01:58.840 --> 00:02:01.350 align:start position:0% <00:01:58.840>really <00:01:58.933>kind <00:01:59.026>of <00:01:59.120>insane. <00:01:59.213>But <00:01:59.306>the <00:01:59.400>second <00:01:59.493>thing <00:01:59.586>we <00:01:59.680>did <00:01:59.773>so <00:01:59.866>far <00:01:59.960>is <00:02:00.053>of <00:02:00.146>course <00:02:00.240>having 00:02:01.350 --> 00:02:01.360 align:start position:0% <00:02:01.350>thing <00:02:01.351>we <00:02:01.352>did <00:02:01.353>so <00:02:01.354>far <00:02:01.355>is <00:02:01.356>of <00:02:01.357>course <00:02:01.359>having 00:02:01.360 --> 00:02:03.469 align:start position:0% <00:02:01.360>thing <00:02:01.460>we <00:02:01.560>did <00:02:01.660>so <00:02:01.760>far <00:02:01.860>is <00:02:01.960>of <00:02:02.060>course <00:02:02.160>having <00:02:02.260>a <00:02:02.360>second <00:02:02.460>factor. <00:02:02.560>Having <00:02:02.660>like <00:02:02.760>Google 00:02:03.469 --> 00:02:03.479 align:start position:0% <00:02:03.469>a <00:02:03.470>second <00:02:03.472>factor. <00:02:03.474>Having <00:02:03.476>like <00:02:03.478>Google 00:02:03.479 --> 00:02:05.870 align:start position:0% <00:02:03.479>a <00:02:03.595>second <00:02:03.712>factor. <00:02:03.829>Having <00:02:03.945>like <00:02:04.062>Google <00:02:04.179>Authenticator <00:02:04.295>and <00:02:04.412>maybe <00:02:04.529>or <00:02:04.645>maybe <00:02:04.762>an <00:02:04.879>SMS 00:02:05.870 --> 00:02:05.880 align:start position:0% <00:02:05.870>Authenticator <00:02:05.871>and <00:02:05.873>maybe <00:02:05.874>or <00:02:05.876>maybe <00:02:05.877>an <00:02:05.878>SMS 00:02:05.880 --> 00:02:09.230 align:start position:0% <00:02:05.880>Authenticator <00:02:05.987>and <00:02:06.095>maybe <00:02:06.203>or <00:02:06.310>maybe <00:02:06.418>an <00:02:06.526>SMS <00:02:06.633>code <00:02:06.741>sent <00:02:06.849>to <00:02:06.956>our <00:02:07.064>smartphone <00:02:07.172>basically <00:02:07.280>to 00:02:09.230 --> 00:02:09.240 align:start position:0% <00:02:09.229>code <00:02:09.231>sent <00:02:09.233>to <00:02:09.234>our <00:02:09.235>smartphone <00:02:09.237>basically <00:02:09.239>to 00:02:09.240 --> 00:02:12.430 align:start position:0% <00:02:09.240>code <00:02:09.347>sent <00:02:09.455>to <00:02:09.563>our <00:02:09.670>smartphone <00:02:09.778>basically <00:02:09.886>to <00:02:09.993>entering <00:02:10.101>inside <00:02:10.209>a <00:02:10.316>third <00:02:10.424>input <00:02:10.532>field <00:02:10.640>this 00:02:12.430 --> 00:02:12.440 align:start position:0% <00:02:12.430>entering <00:02:12.431>inside <00:02:12.433>a <00:02:12.434>third <00:02:12.436>input <00:02:12.437>field <00:02:12.439>this 00:02:12.440 --> 00:02:15.110 align:start position:0% <00:02:12.440>entering <00:02:12.540>inside <00:02:12.640>a <00:02:12.740>third <00:02:12.840>input <00:02:12.940>field <00:02:13.040>this <00:02:13.140>kind <00:02:13.240>of <00:02:13.340>code. <00:02:13.440>But <00:02:13.540>what <00:02:13.640>makes <00:02:13.740>us <00:02:13.840>actually 00:02:15.110 --> 00:02:15.120 align:start position:0% <00:02:15.110>kind <00:02:15.111>of <00:02:15.112>code. <00:02:15.113>But <00:02:15.115>what <00:02:15.116>makes <00:02:15.117>us <00:02:15.119>actually 00:02:15.120 --> 00:02:17.670 align:start position:0% <00:02:15.120>kind <00:02:15.227>of <00:02:15.335>code. <00:02:15.443>But <00:02:15.550>what <00:02:15.658>makes <00:02:15.766>us <00:02:15.873>actually <00:02:15.981>think <00:02:16.089>that <00:02:16.196>this <00:02:16.304>is <00:02:16.412>more <00:02:16.520>secure? 00:02:17.670 --> 00:02:17.680 align:start position:0% <00:02:17.670>think <00:02:17.671>that <00:02:17.673>this <00:02:17.675>is <00:02:17.677>more <00:02:17.679>secure? 00:02:17.680 --> 00:02:20.830 align:start position:0% <00:02:17.680>think <00:02:17.780>that <00:02:17.880>this <00:02:17.980>is <00:02:18.080>more <00:02:18.180>secure? <00:02:18.280>If <00:02:18.380>I <00:02:18.480>can <00:02:18.580>fish <00:02:18.680>out <00:02:18.780>your <00:02:18.880>email <00:02:18.980>address <00:02:19.080>and 00:02:20.830 --> 00:02:20.840 align:start position:0% <00:02:20.829>If <00:02:20.831>I <00:02:20.832>can <00:02:20.833>fish <00:02:20.834>out <00:02:20.835>your <00:02:20.836>email <00:02:20.837>address <00:02:20.839>and 00:02:20.840 --> 00:02:23.070 align:start position:0% <00:02:20.840>If <00:02:20.927>I <00:02:21.015>can <00:02:21.102>fish <00:02:21.190>out <00:02:21.277>your <00:02:21.365>email <00:02:21.452>address <00:02:21.540>and <00:02:21.627>maybe <00:02:21.715>your <00:02:21.802>password, <00:02:21.890>I <00:02:21.977>can <00:02:22.065>also <00:02:22.152>fish <00:02:22.240>out 00:02:23.070 --> 00:02:23.080 align:start position:0% <00:02:23.070>maybe <00:02:23.071>your <00:02:23.072>password, <00:02:23.073>I <00:02:23.075>can <00:02:23.076>also <00:02:23.077>fish <00:02:23.078>out 00:02:23.080 --> 00:02:25.790 align:start position:0% <00:02:23.079>maybe <00:02:23.196>your <00:02:23.313>password, <00:02:23.429>I <00:02:23.546>can <00:02:23.663>also <00:02:23.779>fish <00:02:23.896>out <00:02:24.013>your <00:02:24.130>authentication <00:02:24.246>code <00:02:24.363>as <00:02:24.480>well. 00:02:25.790 --> 00:02:25.800 align:start position:0% <00:02:25.790>your <00:02:25.792>authentication <00:02:25.794>code <00:02:25.796>as <00:02:25.799>well. 00:02:25.800 --> 00:02:27.910 align:start position:0% <00:02:25.800>your <00:02:25.900>authentication <00:02:26.000>code <00:02:26.100>as <00:02:26.200>well. <00:02:26.300>Since <00:02:26.400>I <00:02:26.500>make <00:02:26.600>it <00:02:26.700>a <00:02:26.800>little <00:02:26.900>bit <00:02:27.000>I <00:02:27.100>need <00:02:27.200>to 00:02:27.910 --> 00:02:27.920 align:start position:0% <00:02:27.910>Since <00:02:27.911>I <00:02:27.912>make <00:02:27.913>it <00:02:27.914>a <00:02:27.915>little <00:02:27.916>bit <00:02:27.917>I <00:02:27.918>need <00:02:27.919>to 00:02:27.920 --> 00:02:30.350 align:start position:0% <00:02:27.920>Since <00:02:27.997>I <00:02:28.075>make <00:02:28.153>it <00:02:28.231>a <00:02:28.308>little <00:02:28.386>bit <00:02:28.464>I <00:02:28.542>need <00:02:28.620>to <00:02:28.697>be <00:02:28.775>fast <00:02:28.853>of <00:02:28.931>course <00:02:29.008>just <00:02:29.086>in <00:02:29.164>this <00:02:29.242>point. <00:02:29.320>So 00:02:30.350 --> 00:02:30.360 align:start position:0% <00:02:30.350>be <00:02:30.351>fast <00:02:30.352>of <00:02:30.353>course <00:02:30.354>just <00:02:30.355>in <00:02:30.356>this <00:02:30.357>point. <00:02:30.359>So 00:02:30.360 --> 00:02:32.790 align:start position:0% <00:02:30.360>be <00:02:30.447>fast <00:02:30.535>of <00:02:30.622>course <00:02:30.710>just <00:02:30.797>in <00:02:30.885>this <00:02:30.972>point. <00:02:31.060>So <00:02:31.147>I <00:02:31.235>would <00:02:31.322>just <00:02:31.410>let <00:02:31.497>you <00:02:31.585>visit <00:02:31.672>some <00:02:31.760>fishing 00:02:32.790 --> 00:02:32.800 align:start position:0% <00:02:32.790>I <00:02:32.791>would <00:02:32.792>just <00:02:32.793>let <00:02:32.795>you <00:02:32.796>visit <00:02:32.797>some <00:02:32.799>fishing 00:02:32.800 --> 00:02:36.830 align:start position:0% <00:02:32.800>I <00:02:32.893>would <00:02:32.986>just <00:02:33.080>let <00:02:33.173>you <00:02:33.266>visit <00:02:33.360>some <00:02:33.453>fishing <00:02:33.546>URL <00:02:33.640>and <00:02:33.733>then <00:02:33.826>I <00:02:33.920>have <00:02:34.013>a <00:02:34.106>proxy <00:02:34.200>basically. 00:02:36.830 --> 00:02:36.840 align:start position:0% <00:02:36.829>URL <00:02:36.831>and <00:02:36.832>then <00:02:36.833>I <00:02:36.835>have <00:02:36.836>a <00:02:36.837>proxy <00:02:36.839>basically. 00:02:36.840 --> 00:02:39.430 align:start position:0% <00:02:36.840>URL <00:02:36.940>and <00:02:37.040>then <00:02:37.140>I <00:02:37.240>have <00:02:37.340>a <00:02:37.440>proxy <00:02:37.540>basically. <00:02:37.640>Maybe <00:02:37.740>it's <00:02:37.840>shop.com <00:02:37.940>or <00:02:38.040>whatnot <00:02:38.140>and <00:02:38.240>this 00:02:39.430 --> 00:02:39.440 align:start position:0% <00:02:39.430>Maybe <00:02:39.431>it's <00:02:39.433>shop.com <00:02:39.434>or <00:02:39.436>whatnot <00:02:39.437>and <00:02:39.439>this 00:02:39.440 --> 00:02:43.070 align:start position:0% <00:02:39.440>Maybe <00:02:39.540>it's <00:02:39.640>shop.com <00:02:39.740>or <00:02:39.840>whatnot <00:02:39.940>and <00:02:40.040>this <00:02:40.140>kind <00:02:40.240>of <00:02:40.340>proxy <00:02:40.440>just <00:02:40.540>in <00:02:40.640>real <00:02:40.740>time <00:02:40.840>actually 00:02:43.070 --> 00:02:43.080 align:start position:0% <00:02:43.070>kind <00:02:43.071>of <00:02:43.072>proxy <00:02:43.073>just <00:02:43.075>in <00:02:43.076>real <00:02:43.077>time <00:02:43.078>actually 00:02:43.080 --> 00:02:45.350 align:start position:0% <00:02:43.079>kind <00:02:43.196>of <00:02:43.313>proxy <00:02:43.429>just <00:02:43.546>in <00:02:43.663>real <00:02:43.779>time <00:02:43.896>actually <00:02:44.013>forwards <00:02:44.130>this <00:02:44.246>authentication <00:02:44.363>code <00:02:44.480>and 00:02:45.350 --> 00:02:45.360 align:start position:0% <00:02:45.350>forwards <00:02:45.352>this <00:02:45.354>authentication <00:02:45.356>code <00:02:45.359>and 00:02:45.360 --> 00:02:48.110 align:start position:0% <00:02:45.360>forwards <00:02:45.515>this <00:02:45.671>authentication <00:02:45.826>code <00:02:45.982>and <00:02:46.137>everything <00:02:46.293>towards <00:02:46.448>maybe <00:02:46.604>the <00:02:46.760>legitimate 00:02:48.110 --> 00:02:48.120 align:start position:0% <00:02:48.110>everything <00:02:48.112>towards <00:02:48.114>maybe <00:02:48.116>the <00:02:48.119>legitimate 00:02:48.120 --> 00:02:50.150 align:start position:0% <00:02:48.120>everything <00:02:48.247>towards <00:02:48.374>maybe <00:02:48.501>the <00:02:48.629>legitimate <00:02:48.756>site <00:02:48.883>like <00:02:49.010>the <00:02:49.138>real <00:02:49.265>URL <00:02:49.392>like <00:02:49.520>real 00:02:50.150 --> 00:02:50.160 align:start position:0% <00:02:50.150>site <00:02:50.151>like <00:02:50.153>the <00:02:50.154>real <00:02:50.156>URL <00:02:50.157>like <00:02:50.159>real 00:02:50.160 --> 00:02:53.230 align:start position:0% <00:02:50.160>site <00:02:50.267>like <00:02:50.375>the <00:02:50.483>real <00:02:50.590>URL <00:02:50.698>like <00:02:50.806>real <00:02:50.913>shop.com <00:02:51.021>and <00:02:51.129>the <00:02:51.236>login <00:02:51.344>succeed. <00:02:51.452>So <00:02:51.560>the 00:02:53.230 --> 00:02:53.240 align:start position:0% <00:02:53.230>shop.com <00:02:53.231>and <00:02:53.233>the <00:02:53.234>login <00:02:53.236>succeed. <00:02:53.237>So <00:02:53.239>the 00:02:53.240 --> 00:02:55.790 align:start position:0% <00:02:53.240>shop.com <00:02:53.356>and <00:02:53.473>the <00:02:53.590>login <00:02:53.706>succeed. <00:02:53.823>So <00:02:53.940>the <00:02:54.056>only <00:02:54.173>different <00:02:54.290>having <00:02:54.406>just <00:02:54.523>a <00:02:54.640>username 00:02:55.790 --> 00:02:55.800 align:start position:0% <00:02:55.790>only <00:02:55.791>different <00:02:55.793>having <00:02:55.795>just <00:02:55.797>a <00:02:55.799>username 00:02:55.800 --> 00:02:58.030 align:start position:0% <00:02:55.800>only <00:02:55.916>different <00:02:56.033>having <00:02:56.150>just <00:02:56.266>a <00:02:56.383>username <00:02:56.500>and <00:02:56.616>password <00:02:56.733>and <00:02:56.850>having <00:02:56.966>a <00:02:57.083>fishing <00:02:57.200>attack 00:02:58.030 --> 00:02:58.040 align:start position:0% <00:02:58.030>and <00:02:58.031>password <00:02:58.033>and <00:02:58.034>having <00:02:58.036>a <00:02:58.037>fishing <00:02:58.039>attack 00:02:58.040 --> 00:03:00.670 align:start position:0% <00:02:58.040>and <00:02:58.127>password <00:02:58.215>and <00:02:58.302>having <00:02:58.390>a <00:02:58.477>fishing <00:02:58.565>attack <00:02:58.652>here <00:02:58.739>is <00:02:58.827>just <00:02:58.915>that <00:02:59.002>I <00:02:59.090>need <00:02:59.177>to <00:02:59.265>be <00:02:59.352>fast. <00:02:59.440>But 00:03:00.670 --> 00:03:00.680 align:start position:0% <00:03:00.670>here <00:03:00.671>is <00:03:00.672>just <00:03:00.673>that <00:03:00.674>I <00:03:00.675>need <00:03:00.676>to <00:03:00.677>be <00:03:00.678>fast. <00:03:00.679>But 00:03:00.680 --> 00:03:02.470 align:start position:0% <00:03:00.680>here <00:03:00.773>is <00:03:00.866>just <00:03:00.960>that <00:03:01.053>I <00:03:01.146>need <00:03:01.240>to <00:03:01.333>be <00:03:01.426>fast. <00:03:01.520>But <00:03:01.613>entering <00:03:01.706>a <00:03:01.800>proxy <00:03:01.893>in <00:03:01.986>between <00:03:02.080>proxying 00:03:02.470 --> 00:03:02.480 align:start position:0% <00:03:02.470>entering <00:03:02.471>a <00:03:02.473>proxy <00:03:02.475>in <00:03:02.477>between <00:03:02.478>proxying 00:03:02.480 --> 00:03:04.070 align:start position:0% <00:03:02.480>entering <00:03:02.619>a <00:03:02.760>proxy <00:03:02.899>in <00:03:03.040>between <00:03:03.179>proxying <00:03:03.320>this <00:03:03.459>immediately <00:03:03.600>through <00:03:03.739>maybe <00:03:03.880>the 00:03:04.070 --> 00:03:04.080 align:start position:0% <00:03:04.070>this <00:03:04.072>immediately <00:03:04.074>through <00:03:04.076>maybe <00:03:04.079>the 00:03:04.080 --> 00:03:06.190 align:start position:0% <00:03:04.080>this <00:03:04.313>immediately <00:03:04.546>through <00:03:04.780>maybe <00:03:05.013>the <00:03:05.246>legitimate <00:03:05.480>site 00:03:06.190 --> 00:03:06.200 align:start position:0% <00:03:06.190>legitimate <00:03:06.198>site 00:03:06.200 --> 00:03:09.229 align:start position:0% <00:03:06.200>legitimate <00:03:06.355>site <00:03:06.511>I <00:03:06.666>can <00:03:06.822>just <00:03:06.977>also <00:03:07.133>fish <00:03:07.288>your <00:03:07.444>code <00:03:07.600>basically 00:03:09.229 --> 00:03:09.239 align:start position:0% <00:03:09.228>I <00:03:09.230>can <00:03:09.231>just <00:03:09.232>also <00:03:09.234>fish <00:03:09.235>your <00:03:09.236>code <00:03:09.238>basically 00:03:09.239 --> 00:03:12.509 align:start position:0% <00:03:09.239>I <00:03:09.339>can <00:03:09.439>just <00:03:09.539>also <00:03:09.639>fish <00:03:09.739>your <00:03:09.839>code <00:03:09.939>basically <00:03:10.039>and <00:03:10.139>steal <00:03:10.239>your <00:03:10.339>session <00:03:10.439>cookie <00:03:10.539>and <00:03:10.639>of 00:03:12.509 --> 00:03:12.519 align:start position:0% <00:03:12.509>and <00:03:12.510>steal <00:03:12.512>your <00:03:12.513>session <00:03:12.515>cookie <00:03:12.516>and <00:03:12.518>of 00:03:12.519 --> 00:03:14.870 align:start position:0% <00:03:12.519>and <00:03:12.619>steal <00:03:12.719>your <00:03:12.819>session <00:03:12.919>cookie <00:03:13.019>and <00:03:13.119>of <00:03:13.219>course <00:03:13.319>the <00:03:13.419>victim <00:03:13.519>the <00:03:13.619>user <00:03:13.719>would <00:03:13.819>not <00:03:13.919>see 00:03:14.870 --> 00:03:14.880 align:start position:0% <00:03:14.870>course <00:03:14.871>the <00:03:14.872>victim <00:03:14.873>the <00:03:14.875>user <00:03:14.876>would <00:03:14.877>not <00:03:14.879>see 00:03:14.880 --> 00:03:17.509 align:start position:0% <00:03:14.880>course <00:03:14.987>the <00:03:15.095>victim <00:03:15.203>the <00:03:15.310>user <00:03:15.418>would <00:03:15.526>not <00:03:15.633>see <00:03:15.741>anything <00:03:15.849>strange <00:03:15.956>because <00:03:16.064>I <00:03:16.172>also <00:03:16.280>forward 00:03:17.509 --> 00:03:17.519 align:start position:0% <00:03:17.509>anything <00:03:17.510>strange <00:03:17.512>because <00:03:17.514>I <00:03:17.516>also <00:03:17.518>forward 00:03:17.519 --> 00:03:19.509 align:start position:0% <00:03:17.519>anything <00:03:17.646>strange <00:03:17.773>because <00:03:17.900>I <00:03:18.028>also <00:03:18.155>forward <00:03:18.282>back <00:03:18.409>basically <00:03:18.537>to <00:03:18.664>the <00:03:18.791>victim's <00:03:18.919>browser 00:03:19.509 --> 00:03:19.519 align:start position:0% <00:03:19.509>back <00:03:19.510>basically <00:03:19.512>to <00:03:19.514>the <00:03:19.516>victim's <00:03:19.518>browser 00:03:19.519 --> 00:03:21.670 align:start position:0% <00:03:19.519>back <00:03:19.626>basically <00:03:19.734>to <00:03:19.842>the <00:03:19.949>victim's <00:03:20.057>browser <00:03:20.165>and <00:03:20.272>maybe <00:03:20.380>the <00:03:20.488>answer <00:03:20.595>but <00:03:20.703>I <00:03:20.811>just <00:03:20.919>have 00:03:21.670 --> 00:03:21.680 align:start position:0% <00:03:21.670>and <00:03:21.671>maybe <00:03:21.672>the <00:03:21.673>answer <00:03:21.675>but <00:03:21.676>I <00:03:21.677>just <00:03:21.679>have 00:03:21.680 --> 00:03:24.590 align:start position:0% <00:03:21.680>and <00:03:21.807>maybe <00:03:21.934>the <00:03:22.061>answer <00:03:22.189>but <00:03:22.316>I <00:03:22.443>just <00:03:22.570>have <00:03:22.698>your <00:03:22.825>cookie <00:03:22.952>data. <00:03:23.080>So 00:03:24.590 --> 00:03:24.600 align:start position:0% <00:03:24.590>your <00:03:24.593>cookie <00:03:24.596>data. <00:03:24.599>So 00:03:24.600 --> 00:03:26.670 align:start position:0% <00:03:24.600>your <00:03:24.716>cookie <00:03:24.833>data. <00:03:24.950>So <00:03:25.066>I <00:03:25.183>need <00:03:25.299>to <00:03:25.416>tell <00:03:25.533>you <00:03:25.650>having <00:03:25.766>a <00:03:25.883>time <00:03:26.000>based 00:03:26.670 --> 00:03:26.680 align:start position:0% <00:03:26.670>I <00:03:26.671>need <00:03:26.672>to <00:03:26.673>tell <00:03:26.674>you <00:03:26.675>having <00:03:26.676>a <00:03:26.677>time <00:03:26.679>based 00:03:26.680 --> 00:03:28.949 align:start position:0% <00:03:26.680>I <00:03:26.780>need <00:03:26.880>to <00:03:26.980>tell <00:03:27.080>you <00:03:27.180>having <00:03:27.280>a <00:03:27.380>time <00:03:27.480>based <00:03:27.580>OTP <00:03:27.680>does <00:03:27.780>not <00:03:27.880>really <00:03:27.980>protect <00:03:28.080>against 00:03:28.949 --> 00:03:28.959 align:start position:0% <00:03:28.949>OTP <00:03:28.950>does <00:03:28.952>not <00:03:28.954>really <00:03:28.956>protect <00:03:28.958>against 00:03:28.959 --> 00:03:30.030 align:start position:0% <00:03:28.959>OTP <00:03:29.119>does <00:03:29.280>not <00:03:29.440>really <00:03:29.601>protect <00:03:29.762>against <00:03:29.922>fishing. 00:03:30.030 --> 00:03:30.040 align:start position:0% fishing. 00:03:30.040 --> 00:03:32.110 align:start position:0% <00:03:30.040>fishing. <00:03:30.239>The <00:03:30.440>issue <00:03:30.640>lies <00:03:30.840>really <00:03:31.040>in <00:03:31.239>the <00:03:31.440>whole 00:03:32.110 --> 00:03:32.120 align:start position:0% <00:03:32.110>The <00:03:32.111>issue <00:03:32.113>lies <00:03:32.114>really <00:03:32.116>in <00:03:32.117>the <00:03:32.119>whole 00:03:32.120 --> 00:03:34.390 align:start position:0% <00:03:32.120>The <00:03:32.295>issue <00:03:32.470>lies <00:03:32.645>really <00:03:32.820>in <00:03:32.995>the <00:03:33.170>whole <00:03:33.345>structure <00:03:33.520>underneath. 00:03:34.390 --> 00:03:34.400 align:start position:0% <00:03:34.390>structure <00:03:34.399>underneath. 00:03:34.400 --> 00:03:36.150 align:start position:0% <00:03:34.400>structure <00:03:34.540>underneath. <00:03:34.680>And <00:03:34.820>that's <00:03:34.960>why <00:03:35.100>I <00:03:35.240>want <00:03:35.380>to <00:03:35.520>show <00:03:35.660>you <00:03:35.800>and 00:03:36.150 --> 00:03:36.160 align:start position:0% <00:03:36.150>And <00:03:36.151>that's <00:03:36.152>why <00:03:36.153>I <00:03:36.154>want <00:03:36.155>to <00:03:36.156>show <00:03:36.157>you <00:03:36.159>and 00:03:36.160 --> 00:03:39.110 align:start position:0% <00:03:36.160>And <00:03:36.260>that's <00:03:36.359>why <00:03:36.460>I <00:03:36.560>want <00:03:36.660>to <00:03:36.760>show <00:03:36.859>you <00:03:36.960>and <00:03:37.060>tell <00:03:37.160>you <00:03:37.260>what <00:03:37.359>actually <00:03:37.460>makes <00:03:37.560>fishing 00:03:39.110 --> 00:03:39.120 align:start position:0% <00:03:39.110>tell <00:03:39.111>you <00:03:39.113>what <00:03:39.115>actually <00:03:39.117>makes <00:03:39.119>fishing 00:03:39.120 --> 00:03:41.390 align:start position:0% <00:03:39.120>tell <00:03:39.260>you <00:03:39.400>what <00:03:39.540>actually <00:03:39.680>makes <00:03:39.820>fishing <00:03:39.960>structurally <00:03:40.100>impossible <00:03:40.240>when <00:03:40.380>you <00:03:40.520>using 00:03:41.390 --> 00:03:41.400 align:start position:0% <00:03:41.390>structurally <00:03:41.392>impossible <00:03:41.394>when <00:03:41.396>you <00:03:41.399>using 00:03:41.400 --> 00:03:42.870 align:start position:0% <00:03:41.400>structurally <00:03:41.664>impossible <00:03:41.929>when <00:03:42.193>you <00:03:42.458>using <00:03:42.723>passkeys. 00:03:42.870 --> 00:03:42.880 align:start position:0% passkeys. 00:03:42.880 --> 00:03:45.150 align:start position:0% <00:03:42.880>passkeys. <00:03:43.055>But <00:03:43.230>first <00:03:43.405>let <00:03:43.579>me <00:03:43.755>introduce <00:03:43.930>a <00:03:44.105>little <00:03:44.280>bit 00:03:45.150 --> 00:03:45.160 align:start position:0% <00:03:45.150>But <00:03:45.151>first <00:03:45.152>let <00:03:45.153>me <00:03:45.155>introduce <00:03:45.156>a <00:03:45.157>little <00:03:45.159>bit 00:03:45.160 --> 00:03:47.110 align:start position:0% <00:03:45.160>But <00:03:45.260>first <00:03:45.359>let <00:03:45.460>me <00:03:45.560>introduce <00:03:45.660>a <00:03:45.760>little <00:03:45.859>bit <00:03:45.960>myself. <00:03:46.060>My <00:03:46.160>name <00:03:46.260>is <00:03:46.359>Martina <00:03:46.460>I'm <00:03:46.560>coming 00:03:47.110 --> 00:03:47.120 align:start position:0% <00:03:47.110>myself. <00:03:47.111>My <00:03:47.113>name <00:03:47.114>is <00:03:47.116>Martina <00:03:47.117>I'm <00:03:47.119>coming 00:03:47.120 --> 00:03:49.350 align:start position:0% <00:03:47.120>myself. <00:03:47.227>My <00:03:47.335>name <00:03:47.443>is <00:03:47.550>Martina <00:03:47.658>I'm <00:03:47.766>coming <00:03:47.873>from <00:03:47.981>Karlsruhe. <00:03:48.089>I'm <00:03:48.196>working <00:03:48.304>as <00:03:48.412>a <00:03:48.520>appsec 00:03:49.350 --> 00:03:49.360 align:start position:0% <00:03:49.350>from <00:03:49.351>Karlsruhe. <00:03:49.353>I'm <00:03:49.354>working <00:03:49.356>as <00:03:49.357>a <00:03:49.359>appsec 00:03:49.360 --> 00:03:52.590 align:start position:0% <00:03:49.360>from <00:03:49.476>Karlsruhe. <00:03:49.593>I'm <00:03:49.710>working <00:03:49.826>as <00:03:49.943>a <00:03:50.060>appsec <00:03:50.176>engineer <00:03:50.293>more <00:03:50.410>in <00:03:50.526>the <00:03:50.643>defensive <00:03:50.760>section. 00:03:52.590 --> 00:03:52.600 align:start position:0% <00:03:52.590>engineer <00:03:52.591>more <00:03:52.593>in <00:03:52.595>the <00:03:52.597>defensive <00:03:52.599>section. 00:03:52.600 --> 00:03:54.510 align:start position:0% <00:03:52.600>engineer <00:03:52.727>more <00:03:52.854>in <00:03:52.981>the <00:03:53.109>defensive <00:03:53.236>section. <00:03:53.363>So, <00:03:53.490>I <00:03:53.618>educate <00:03:53.745>and <00:03:53.872>help <00:03:54.000>developers 00:03:54.510 --> 00:03:54.520 align:start position:0% <00:03:54.510>So, <00:03:54.511>I <00:03:54.513>educate <00:03:54.515>and <00:03:54.517>help <00:03:54.519>developers 00:03:54.520 --> 00:03:56.910 align:start position:0% <00:03:54.520>So, <00:03:54.647>I <00:03:54.774>educate <00:03:54.901>and <00:03:55.029>help <00:03:55.156>developers <00:03:55.283>hands-on <00:03:55.410>to <00:03:55.538>make <00:03:55.665>the <00:03:55.792>web <00:03:55.920>applications 00:03:56.910 --> 00:03:56.920 align:start position:0% <00:03:56.910>hands-on <00:03:56.911>to <00:03:56.913>make <00:03:56.915>the <00:03:56.917>web <00:03:56.919>applications 00:03:56.920 --> 00:03:58.990 align:start position:0% <00:03:56.920>hands-on <00:03:57.036>to <00:03:57.153>make <00:03:57.270>the <00:03:57.386>web <00:03:57.503>applications <00:03:57.620>more <00:03:57.736>secure. <00:03:57.853>I'm <00:03:57.970>also <00:03:58.086>involved <00:03:58.203>in <00:03:58.320>a 00:03:58.990 --> 00:03:59.000 align:start position:0% <00:03:58.990>more <00:03:58.991>secure. <00:03:58.993>I'm <00:03:58.994>also <00:03:58.996>involved <00:03:58.997>in <00:03:58.999>a 00:03:59.000 --> 00:04:01.390 align:start position:0% <00:03:59.000>more <00:03:59.127>secure. <00:03:59.254>I'm <00:03:59.381>also <00:03:59.509>involved <00:03:59.636>in <00:03:59.763>a <00:03:59.890>couple <00:04:00.018>of <00:04:00.145>communities, <00:04:00.272>currently <00:04:00.400>working 00:04:01.390 --> 00:04:01.400 align:start position:0% <00:04:01.390>couple <00:04:01.392>of <00:04:01.394>communities, <00:04:01.396>currently <00:04:01.399>working 00:04:01.400 --> 00:04:03.910 align:start position:0% <00:04:01.400>couple <00:04:01.527>of <00:04:01.654>communities, <00:04:01.781>currently <00:04:01.909>working <00:04:02.036>on <00:04:02.163>the <00:04:02.290>OWASP <00:04:02.418>Top <00:04:02.545>10 <00:04:02.672>German <00:04:02.800>translation. 00:04:03.910 --> 00:04:03.920 align:start position:0% <00:04:03.910>on <00:04:03.911>the <00:04:03.912>OWASP <00:04:03.914>Top <00:04:03.916>10 <00:04:03.917>German <00:04:03.918>translation. 00:04:03.920 --> 00:04:05.350 align:start position:0% <00:04:03.920>on <00:04:04.080>the <00:04:04.241>OWASP <00:04:04.402>Top <00:04:04.563>10 <00:04:04.724>German <00:04:04.885>translation. <00:04:05.046>I <00:04:05.207>also 00:04:05.350 --> 00:04:05.360 align:start position:0% <00:04:05.350>I <00:04:05.359>also 00:04:05.360 --> 00:04:07.550 align:start position:0% <00:04:05.360>I <00:04:05.560>also <00:04:05.760>author, <00:04:05.960>co-author, <00:04:06.160>and <00:04:06.360>review <00:04:06.560>some <00:04:06.760>of 00:04:07.550 --> 00:04:07.560 align:start position:0% <00:04:07.550>author, <00:04:07.551>co-author, <00:04:07.553>and <00:04:07.555>review <00:04:07.557>some <00:04:07.559>of 00:04:07.560 --> 00:04:10.270 align:start position:0% <00:04:07.560>author, <00:04:07.676>co-author, <00:04:07.793>and <00:04:07.910>review <00:04:08.026>some <00:04:08.143>of <00:04:08.260>the <00:04:08.376>MDN <00:04:08.493>docs <00:04:08.610>in <00:04:08.726>this <00:04:08.843>security <00:04:08.960>web 00:04:10.270 --> 00:04:10.280 align:start position:0% <00:04:10.270>the <00:04:10.271>MDN <00:04:10.273>docs <00:04:10.274>in <00:04:10.276>this <00:04:10.277>security <00:04:10.279>web 00:04:10.280 --> 00:04:13.910 align:start position:0% <00:04:10.280>the <00:04:10.396>MDN <00:04:10.513>docs <00:04:10.630>in <00:04:10.746>this <00:04:10.863>security <00:04:10.980>web <00:04:11.096>application <00:04:11.213>community <00:04:11.330>group <00:04:11.446>at <00:04:11.563>the <00:04:11.680>W3C. 00:04:13.910 --> 00:04:13.920 align:start position:0% <00:04:13.910>application <00:04:13.911>community <00:04:13.913>group <00:04:13.915>at <00:04:13.917>the <00:04:13.918>W3C. 00:04:13.920 --> 00:04:15.350 align:start position:0% <00:04:13.920>application <00:04:14.027>community <00:04:14.134>group <00:04:14.241>at <00:04:14.349>the <00:04:14.456>W3C. <00:04:14.563>I'm <00:04:14.670>also <00:04:14.778>a <00:04:14.885>Google <00:04:14.992>Developer <00:04:15.099>Expert <00:04:15.207>in 00:04:15.350 --> 00:04:15.360 align:start position:0% <00:04:15.350>I'm <00:04:15.351>also <00:04:15.353>a <00:04:15.354>Google <00:04:15.356>Developer <00:04:15.357>Expert <00:04:15.359>in 00:04:15.360 --> 00:04:17.349 align:start position:0% <00:04:15.360>I'm <00:04:15.476>also <00:04:15.593>a <00:04:15.710>Google <00:04:15.826>Developer <00:04:15.943>Expert <00:04:16.060>in <00:04:16.176>Angular <00:04:16.293>and <00:04:16.410>Identity, <00:04:16.526>which <00:04:16.643>is <00:04:16.760>really 00:04:17.349 --> 00:04:17.359 align:start position:0% <00:04:17.349>Angular <00:04:17.350>and <00:04:17.352>Identity, <00:04:17.354>which <00:04:17.356>is <00:04:17.358>really 00:04:17.359 --> 00:04:19.430 align:start position:0% <00:04:17.358>Angular <00:04:17.466>and <00:04:17.574>Identity, <00:04:17.682>which <00:04:17.789>is <00:04:17.897>really <00:04:18.005>nice <00:04:18.112>because <00:04:18.220>I <00:04:18.328>get <00:04:18.435>some <00:04:18.543>Google <00:04:18.651>swag <00:04:18.758>from 00:04:19.430 --> 00:04:19.440 align:start position:0% <00:04:19.430>nice <00:04:19.431>because <00:04:19.432>I <00:04:19.433>get <00:04:19.435>some <00:04:19.436>Google <00:04:19.437>swag <00:04:19.439>from 00:04:19.440 --> 00:04:20.750 align:start position:0% <00:04:19.440>nice <00:04:19.557>because <00:04:19.675>I <00:04:19.793>get <00:04:19.911>some <00:04:20.029>Google <00:04:20.147>swag <00:04:20.265>from <00:04:20.383>time <00:04:20.501>to <00:04:20.619>time. 00:04:20.750 --> 00:04:20.760 align:start position:0% <00:04:20.750>time <00:04:20.754>to <00:04:20.759>time. 00:04:20.760 --> 00:04:22.110 align:start position:0% <00:04:20.760>time <00:04:20.881>to <00:04:21.003>time. <00:04:21.124>If <00:04:21.245>you <00:04:21.367>have <00:04:21.488>any <00:04:21.610>kind <00:04:21.732>of <00:04:21.853>question, <00:04:21.975>you 00:04:22.110 --> 00:04:22.120 align:start position:0% <00:04:22.110>If <00:04:22.111>you <00:04:22.112>have <00:04:22.113>any <00:04:22.115>kind <00:04:22.116>of <00:04:22.117>question, <00:04:22.119>you 00:04:22.120 --> 00:04:25.030 align:start position:0% <00:04:22.120>If <00:04:22.207>you <00:04:22.295>have <00:04:22.382>any <00:04:22.470>kind <00:04:22.557>of <00:04:22.645>question, <00:04:22.732>you <00:04:22.820>can <00:04:22.907>ping <00:04:22.995>me <00:04:23.082>in <00:04:23.170>the <00:04:23.257>email. <00:04:23.345>I <00:04:23.432>usually <00:04:23.520>love 00:04:25.030 --> 00:04:25.040 align:start position:0% <00:04:25.030>can <00:04:25.031>ping <00:04:25.032>me <00:04:25.033>in <00:04:25.034>the <00:04:25.035>email. <00:04:25.036>I <00:04:25.037>usually <00:04:25.039>love 00:04:25.040 --> 00:04:26.630 align:start position:0% <00:04:25.040>can <00:04:25.133>ping <00:04:25.226>me <00:04:25.320>in <00:04:25.413>the <00:04:25.506>email. <00:04:25.600>I <00:04:25.693>usually <00:04:25.786>love <00:04:25.880>to <00:04:25.973>answer <00:04:26.066>questions <00:04:26.160>to <00:04:26.253>make <00:04:26.346>the <00:04:26.440>world 00:04:26.630 --> 00:04:26.640 align:start position:0% <00:04:26.630>to <00:04:26.631>answer <00:04:26.633>questions <00:04:26.634>to <00:04:26.635>make <00:04:26.637>the <00:04:26.639>world 00:04:26.640 --> 00:04:28.310 align:start position:0% <00:04:26.640>to <00:04:26.767>answer <00:04:26.894>questions <00:04:27.021>to <00:04:27.149>make <00:04:27.276>the <00:04:27.403>world <00:04:27.530>more <00:04:27.658>secure <00:04:27.785>without <00:04:27.912>sending <00:04:28.039>you 00:04:28.310 --> 00:04:28.320 align:start position:0% <00:04:28.310>more <00:04:28.312>secure <00:04:28.314>without <00:04:28.316>sending <00:04:28.319>you 00:04:28.320 --> 00:04:30.510 align:start position:0% <00:04:28.320>more <00:04:28.495>secure <00:04:28.670>without <00:04:28.844>sending <00:04:29.020>you <00:04:29.195>immediately <00:04:29.370>an <00:04:29.545>invoice <00:04:29.719>afterwards. 00:04:30.510 --> 00:04:30.520 align:start position:0% <00:04:30.510>immediately <00:04:30.513>an <00:04:30.515>invoice <00:04:30.519>afterwards. 00:04:30.520 --> 00:04:32.510 align:start position:0% <00:04:30.520>immediately <00:04:30.695>an <00:04:30.870>invoice <00:04:31.044>afterwards. <00:04:31.219>Since <00:04:31.395>I'm <00:04:31.570>really <00:04:31.745>into <00:04:31.919>authentication 00:04:32.510 --> 00:04:32.520 align:start position:0% <00:04:32.510>Since <00:04:32.512>I'm <00:04:32.514>really <00:04:32.516>into <00:04:32.519>authentication 00:04:32.520 --> 00:04:35.270 align:start position:0% <00:04:32.520>Since <00:04:32.647>I'm <00:04:32.774>really <00:04:32.901>into <00:04:33.029>authentication <00:04:33.156>authorization, <00:04:33.283>I <00:04:33.410>also <00:04:33.538>wrote <00:04:33.665>a <00:04:33.792>book <00:04:33.919>about 00:04:35.270 --> 00:04:35.280 align:start position:0% <00:04:35.270>authorization, <00:04:35.271>I <00:04:35.272>also <00:04:35.274>wrote <00:04:35.275>a <00:04:35.277>book <00:04:35.279>about 00:04:35.280 --> 00:04:36.830 align:start position:0% <00:04:35.280>authorization, <00:04:35.434>I <00:04:35.590>also <00:04:35.745>wrote <00:04:35.900>a <00:04:36.054>book <00:04:36.210>about <00:04:36.365>this <00:04:36.520>whole <00:04:36.674>topic. 00:04:36.830 --> 00:04:36.840 align:start position:0% <00:04:36.830>this <00:04:36.834>whole <00:04:36.839>topic. 00:04:36.840 --> 00:04:38.750 align:start position:0% <00:04:36.840>this <00:04:36.995>whole <00:04:37.151>topic. <00:04:37.306>Basically, <00:04:37.462>I <00:04:37.617>call <00:04:37.773>it <00:04:37.928>All <00:04:38.084>Things <00:04:38.240>OAuth 00:04:38.750 --> 00:04:38.760 align:start position:0% <00:04:38.750>Basically, <00:04:38.751>I <00:04:38.753>call <00:04:38.754>it <00:04:38.756>All <00:04:38.757>Things <00:04:38.759>OAuth 00:04:38.760 --> 00:04:40.870 align:start position:0% <00:04:38.760>Basically, <00:04:38.900>I <00:04:39.039>call <00:04:39.180>it <00:04:39.320>All <00:04:39.460>Things <00:04:39.599>OAuth <00:04:39.740>and <00:04:39.880>Open <00:04:40.020>ID <00:04:40.159>Connect, 00:04:40.870 --> 00:04:40.880 align:start position:0% <00:04:40.870>and <00:04:40.873>Open <00:04:40.876>ID <00:04:40.879>Connect, 00:04:40.880 --> 00:04:43.030 align:start position:0% <00:04:40.880>and <00:04:41.020>Open <00:04:41.159>ID <00:04:41.300>Connect, <00:04:41.440>which <00:04:41.580>a <00:04:41.719>couple <00:04:41.860>of <00:04:42.000>live <00:04:42.140>coding <00:04:42.280>examples 00:04:43.030 --> 00:04:43.040 align:start position:0% <00:04:43.030>which <00:04:43.031>a <00:04:43.033>couple <00:04:43.034>of <00:04:43.036>live <00:04:43.037>coding <00:04:43.039>examples 00:04:43.040 --> 00:04:44.830 align:start position:0% <00:04:43.040>which <00:04:43.140>a <00:04:43.240>couple <00:04:43.340>of <00:04:43.440>live <00:04:43.540>coding <00:04:43.640>examples <00:04:43.740>and <00:04:43.840>how <00:04:43.940>to <00:04:44.040>integrate <00:04:44.140>all <00:04:44.240>the <00:04:44.340>things <00:04:44.440>you 00:04:44.830 --> 00:04:44.840 align:start position:0% <00:04:44.830>and <00:04:44.831>how <00:04:44.832>to <00:04:44.833>integrate <00:04:44.835>all <00:04:44.836>the <00:04:44.837>things <00:04:44.839>you 00:04:44.840 --> 00:04:47.909 align:start position:0% <00:04:44.840>and <00:04:44.956>how <00:04:45.073>to <00:04:45.190>integrate <00:04:45.306>all <00:04:45.423>the <00:04:45.540>things <00:04:45.656>you <00:04:45.773>maybe <00:04:45.890>heard <00:04:46.006>previously <00:04:46.123>from <00:04:46.240>Alex, 00:04:47.909 --> 00:04:47.919 align:start position:0% <00:04:47.909>maybe <00:04:47.911>heard <00:04:47.913>previously <00:04:47.915>from <00:04:47.918>Alex, 00:04:47.919 --> 00:04:50.030 align:start position:0% <00:04:47.919>maybe <00:04:48.046>heard <00:04:48.173>previously <00:04:48.300>from <00:04:48.428>Alex, <00:04:48.555>like <00:04:48.682>about <00:04:48.809>DPoP <00:04:48.937>and <00:04:49.064>best <00:04:49.191>practices <00:04:49.318>and 00:04:50.030 --> 00:04:50.040 align:start position:0% <00:04:50.030>like <00:04:50.031>about <00:04:50.033>DPoP <00:04:50.034>and <00:04:50.036>best <00:04:50.037>practices <00:04:50.039>and 00:04:50.040 --> 00:04:52.030 align:start position:0% <00:04:50.040>like <00:04:50.140>about <00:04:50.240>DPoP <00:04:50.340>and <00:04:50.440>best <00:04:50.540>practices <00:04:50.640>and <00:04:50.740>what <00:04:50.840>not. <00:04:50.940>You <00:04:51.040>can <00:04:51.140>read <00:04:51.240>that, <00:04:51.340>but <00:04:51.440>it's 00:04:52.030 --> 00:04:52.040 align:start position:0% <00:04:52.030>what <00:04:52.031>not. <00:04:52.032>You <00:04:52.033>can <00:04:52.035>read <00:04:52.036>that, <00:04:52.037>but <00:04:52.039>it's 00:04:52.040 --> 00:04:54.510 align:start position:0% <00:04:52.040>what <00:04:52.147>not. <00:04:52.255>You <00:04:52.363>can <00:04:52.470>read <00:04:52.578>that, <00:04:52.686>but <00:04:52.793>it's <00:04:52.901>just <00:04:53.009>available <00:04:53.116>in <00:04:53.224>the <00:04:53.332>German <00:04:53.440>language. 00:04:54.510 --> 00:04:54.520 align:start position:0% <00:04:54.510>just <00:04:54.511>available <00:04:54.513>in <00:04:54.515>the <00:04:54.517>German <00:04:54.519>language. 00:04:54.520 --> 00:04:56.710 align:start position:0% <00:04:54.520>just <00:04:54.627>available <00:04:54.735>in <00:04:54.843>the <00:04:54.950>German <00:04:55.058>language. <00:04:55.166>But <00:04:55.273>enough <00:04:55.381>about <00:04:55.489>me. <00:04:55.596>Let's <00:04:55.704>talk <00:04:55.812>a <00:04:55.919>little 00:04:56.710 --> 00:04:56.720 align:start position:0% <00:04:56.710>But <00:04:56.711>enough <00:04:56.712>about <00:04:56.713>me. <00:04:56.715>Let's <00:04:56.716>talk <00:04:56.717>a <00:04:56.719>little 00:04:56.720 --> 00:04:58.990 align:start position:0% <00:04:56.720>But <00:04:56.827>enough <00:04:56.935>about <00:04:57.043>me. <00:04:57.150>Let's <00:04:57.258>talk <00:04:57.366>a <00:04:57.473>little <00:04:57.581>bit <00:04:57.689>how <00:04:57.796>actually <00:04:57.904>passkeys <00:04:58.012>make <00:04:58.120>phishing 00:04:58.990 --> 00:04:59.000 align:start position:0% <00:04:58.990>bit <00:04:58.991>how <00:04:58.993>actually <00:04:58.995>passkeys <00:04:58.997>make <00:04:58.999>phishing 00:04:59.000 --> 00:05:02.670 align:start position:0% <00:04:59.000>bit <00:04:59.116>how <00:04:59.233>actually <00:04:59.350>passkeys <00:04:59.466>make <00:04:59.583>phishing <00:04:59.700>attacks <00:04:59.816>impossible. <00:04:59.933>For <00:05:00.050>that, <00:05:00.166>I <00:05:00.283>need <00:05:00.400>to 00:05:02.670 --> 00:05:02.680 align:start position:0% <00:05:02.670>attacks <00:05:02.671>impossible. <00:05:02.673>For <00:05:02.674>that, <00:05:02.676>I <00:05:02.677>need <00:05:02.679>to 00:05:02.680 --> 00:05:05.430 align:start position:0% <00:05:02.680>attacks <00:05:02.780>impossible. <00:05:02.880>For <00:05:02.980>that, <00:05:03.080>I <00:05:03.180>need <00:05:03.280>to <00:05:03.380>shortly <00:05:03.480>give <00:05:03.580>a <00:05:03.680>step <00:05:03.780>back. <00:05:03.880>Maybe <00:05:03.980>some <00:05:04.080>of 00:05:05.430 --> 00:05:05.440 align:start position:0% <00:05:05.430>shortly <00:05:05.431>give <00:05:05.432>a <00:05:05.433>step <00:05:05.435>back. <00:05:05.436>Maybe <00:05:05.437>some <00:05:05.439>of 00:05:05.440 --> 00:05:07.510 align:start position:0% <00:05:05.440>shortly <00:05:05.540>give <00:05:05.640>a <00:05:05.740>step <00:05:05.840>back. <00:05:05.940>Maybe <00:05:06.040>some <00:05:06.140>of <00:05:06.240>you <00:05:06.340>already <00:05:06.440>familiar <00:05:06.540>with <00:05:06.640>that, <00:05:06.740>like <00:05:06.840>how 00:05:07.510 --> 00:05:07.520 align:start position:0% <00:05:07.510>you <00:05:07.511>already <00:05:07.513>familiar <00:05:07.514>with <00:05:07.515>that, <00:05:07.517>like <00:05:07.519>how 00:05:07.520 --> 00:05:10.670 align:start position:0% <00:05:07.520>you <00:05:07.620>already <00:05:07.719>familiar <00:05:07.820>with <00:05:07.919>that, <00:05:08.020>like <00:05:08.120>how <00:05:08.219>a <00:05:08.320>passkey <00:05:08.419>is <00:05:08.520>actually <00:05:08.620>created. <00:05:08.719>We <00:05:08.820>get <00:05:08.919>a 00:05:10.670 --> 00:05:10.680 align:start position:0% <00:05:10.670>a <00:05:10.671>passkey <00:05:10.672>is <00:05:10.673>actually <00:05:10.675>created. <00:05:10.676>We <00:05:10.677>get <00:05:10.679>a 00:05:10.680 --> 00:05:13.350 align:start position:0% <00:05:10.680>a <00:05:10.780>passkey <00:05:10.880>is <00:05:10.980>actually <00:05:11.080>created. <00:05:11.180>We <00:05:11.280>get <00:05:11.380>a <00:05:11.480>challenge <00:05:11.580>from <00:05:11.680>the <00:05:11.780>server, <00:05:11.880>like <00:05:11.980>the <00:05:12.080>user 00:05:13.350 --> 00:05:13.360 align:start position:0% <00:05:13.350>challenge <00:05:13.351>from <00:05:13.353>the <00:05:13.354>server, <00:05:13.356>like <00:05:13.357>the <00:05:13.359>user 00:05:13.360 --> 00:05:14.470 align:start position:0% <00:05:13.360>challenge <00:05:13.443>from <00:05:13.526>the <00:05:13.609>server, <00:05:13.693>like <00:05:13.776>the <00:05:13.859>user <00:05:13.942>clicks <00:05:14.026>of <00:05:14.109>course <00:05:14.192>and <00:05:14.275>registers <00:05:14.359>a 00:05:14.470 --> 00:05:14.480 align:start position:0% <00:05:14.470>clicks <00:05:14.471>of <00:05:14.473>course <00:05:14.475>and <00:05:14.477>registers <00:05:14.479>a 00:05:14.480 --> 00:05:16.830 align:start position:0% <00:05:14.480>clicks <00:05:14.596>of <00:05:14.713>course <00:05:14.830>and <00:05:14.946>registers <00:05:15.063>a <00:05:15.180>passkey. <00:05:15.296>We <00:05:15.413>get <00:05:15.530>a <00:05:15.646>challenge <00:05:15.763>from <00:05:15.880>the 00:05:16.830 --> 00:05:16.840 align:start position:0% <00:05:16.830>passkey. <00:05:16.831>We <00:05:16.832>get <00:05:16.834>a <00:05:16.835>challenge <00:05:16.837>from <00:05:16.839>the 00:05:16.840 --> 00:05:19.110 align:start position:0% <00:05:16.840>passkey. <00:05:16.947>We <00:05:17.055>get <00:05:17.163>a <00:05:17.270>challenge <00:05:17.378>from <00:05:17.486>the <00:05:17.593>from <00:05:17.701>the <00:05:17.809>server. <00:05:17.916>This <00:05:18.024>challenge <00:05:18.132>can <00:05:18.239>just 00:05:19.110 --> 00:05:19.120 align:start position:0% <00:05:19.110>from <00:05:19.111>the <00:05:19.113>server. <00:05:19.114>This <00:05:19.116>challenge <00:05:19.117>can <00:05:19.119>just 00:05:19.120 --> 00:05:21.230 align:start position:0% <00:05:19.120>from <00:05:19.227>the <00:05:19.335>server. <00:05:19.443>This <00:05:19.550>challenge <00:05:19.658>can <00:05:19.766>just <00:05:19.873>be <00:05:19.981>used <00:05:20.089>once, <00:05:20.196>so <00:05:20.304>it's <00:05:20.412>a <00:05:20.520>perfectly 00:05:21.230 --> 00:05:21.240 align:start position:0% <00:05:21.230>be <00:05:21.231>used <00:05:21.233>once, <00:05:21.234>so <00:05:21.236>it's <00:05:21.237>a <00:05:21.239>perfectly 00:05:21.240 --> 00:05:24.070 align:start position:0% <00:05:21.240>be <00:05:21.367>used <00:05:21.494>once, <00:05:21.621>so <00:05:21.749>it's <00:05:21.876>a <00:05:22.003>perfectly <00:05:22.130>protection <00:05:22.258>against <00:05:22.385>replay <00:05:22.512>attacks. <00:05:22.640>And 00:05:24.070 --> 00:05:24.080 align:start position:0% <00:05:24.070>protection <00:05:24.072>against <00:05:24.074>replay <00:05:24.076>attacks. <00:05:24.079>And 00:05:24.080 --> 00:05:25.710 align:start position:0% <00:05:24.080>protection <00:05:24.196>against <00:05:24.313>replay <00:05:24.430>attacks. <00:05:24.546>And <00:05:24.663>of <00:05:24.780>course, <00:05:24.896>it <00:05:25.013>has <00:05:25.130>a <00:05:25.246>high <00:05:25.363>entropy. <00:05:25.479>It 00:05:25.710 --> 00:05:25.720 align:start position:0% <00:05:25.710>of <00:05:25.711>course, <00:05:25.712>it <00:05:25.713>has <00:05:25.715>a <00:05:25.716>high <00:05:25.717>entropy. <00:05:25.719>It 00:05:25.720 --> 00:05:27.190 align:start position:0% <00:05:25.720>of <00:05:25.814>course, <00:05:25.909>it <00:05:26.003>has <00:05:26.098>a <00:05:26.192>high <00:05:26.287>entropy. <00:05:26.381>It <00:05:26.476>should <00:05:26.570>not <00:05:26.665>be <00:05:26.759>guessable. <00:05:26.854>It <00:05:26.948>should <00:05:27.043>be 00:05:27.190 --> 00:05:27.200 align:start position:0% <00:05:27.190>should <00:05:27.191>not <00:05:27.193>be <00:05:27.194>guessable. <00:05:27.195>It <00:05:27.197>should <00:05:27.199>be 00:05:27.200 --> 00:05:30.350 align:start position:0% <00:05:27.200>should <00:05:27.340>not <00:05:27.479>be <00:05:27.620>guessable. <00:05:27.760>It <00:05:27.900>should <00:05:28.039>be <00:05:28.180>cryptographically <00:05:28.320>perfect <00:05:28.460>nonce <00:05:28.599>value. 00:05:30.350 --> 00:05:30.360 align:start position:0% <00:05:30.350>cryptographically <00:05:30.353>perfect <00:05:30.356>nonce <00:05:30.359>value. 00:05:30.360 --> 00:05:31.830 align:start position:0% <00:05:30.360>cryptographically <00:05:30.507>perfect <00:05:30.654>nonce <00:05:30.801>value. <00:05:30.948>And <00:05:31.095>now <00:05:31.242>comes <00:05:31.389>actually <00:05:31.536>the <00:05:31.683>most 00:05:31.830 --> 00:05:31.840 align:start position:0% <00:05:31.830>And <00:05:31.831>now <00:05:31.833>comes <00:05:31.835>actually <00:05:31.837>the <00:05:31.839>most 00:05:31.840 --> 00:05:33.710 align:start position:0% <00:05:31.840>And <00:05:31.979>now <00:05:32.119>comes <00:05:32.260>actually <00:05:32.400>the <00:05:32.539>most <00:05:32.679>interesting <00:05:32.820>part, <00:05:32.960>we're <00:05:33.099>calling <00:05:33.239>the 00:05:33.710 --> 00:05:33.720 align:start position:0% <00:05:33.710>interesting <00:05:33.712>part, <00:05:33.714>we're <00:05:33.716>calling <00:05:33.719>the 00:05:33.720 --> 00:05:35.950 align:start position:0% <00:05:33.720>interesting <00:05:33.847>part, <00:05:33.974>we're <00:05:34.101>calling <00:05:34.229>the <00:05:34.356>WebAuthn <00:05:34.483>API. <00:05:34.610>This <00:05:34.738>is <00:05:34.865>a <00:05:34.992>JavaScript <00:05:35.120>API 00:05:35.950 --> 00:05:35.960 align:start position:0% <00:05:35.950>WebAuthn <00:05:35.951>API. <00:05:35.953>This <00:05:35.954>is <00:05:35.955>a <00:05:35.957>JavaScript <00:05:35.959>API 00:05:35.960 --> 00:05:37.550 align:start position:0% <00:05:35.960>WebAuthn <00:05:36.115>API. <00:05:36.271>This <00:05:36.426>is <00:05:36.582>a <00:05:36.737>JavaScript <00:05:36.893>API <00:05:37.048>inside <00:05:37.204>the <00:05:37.359>browser, 00:05:37.550 --> 00:05:37.560 align:start position:0% <00:05:37.550>inside <00:05:37.554>the <00:05:37.559>browser, 00:05:37.560 --> 00:05:40.550 align:start position:0% <00:05:37.560>inside <00:05:37.735>the <00:05:37.910>browser, <00:05:38.085>quite <00:05:38.260>common. <00:05:38.435>And <00:05:38.610>throughout <00:05:38.785>a <00:05:38.960>so-called 00:05:40.550 --> 00:05:40.560 align:start position:0% <00:05:40.550>quite <00:05:40.551>common. <00:05:40.553>And <00:05:40.555>throughout <00:05:40.557>a <00:05:40.559>so-called 00:05:40.560 --> 00:05:43.630 align:start position:0% <00:05:40.560>quite <00:05:40.715>common. <00:05:40.871>And <00:05:41.026>throughout <00:05:41.182>a <00:05:41.337>so-called <00:05:41.493>client <00:05:41.648>authenticator <00:05:41.804>protocol <00:05:41.960>2, 00:05:43.630 --> 00:05:43.640 align:start position:0% <00:05:43.630>client <00:05:43.633>authenticator <00:05:43.635>protocol <00:05:43.639>2, 00:05:43.640 --> 00:05:46.390 align:start position:0% <00:05:43.640>client <00:05:43.767>authenticator <00:05:43.894>protocol <00:05:44.021>2, <00:05:44.149>we <00:05:44.276>know <00:05:44.403>exactly <00:05:44.530>how <00:05:44.658>my <00:05:44.785>browser <00:05:44.912>can <00:05:45.039>now 00:05:46.390 --> 00:05:46.400 align:start position:0% <00:05:46.390>we <00:05:46.391>know <00:05:46.392>exactly <00:05:46.393>how <00:05:46.395>my <00:05:46.396>browser <00:05:46.397>can <00:05:46.399>now 00:05:46.400 --> 00:05:48.390 align:start position:0% <00:05:46.400>we <00:05:46.527>know <00:05:46.654>exactly <00:05:46.781>how <00:05:46.909>my <00:05:47.036>browser <00:05:47.163>can <00:05:47.290>now <00:05:47.418>contact <00:05:47.545>all <00:05:47.672>the <00:05:47.799>connected 00:05:48.390 --> 00:05:48.400 align:start position:0% <00:05:48.390>contact <00:05:48.393>all <00:05:48.395>the <00:05:48.399>connected 00:05:48.400 --> 00:05:49.950 align:start position:0% <00:05:48.400>contact <00:05:48.748>all <00:05:49.097>the <00:05:49.446>connected <00:05:49.794>authenticators. 00:05:49.950 --> 00:05:49.960 align:start position:0% authenticators. 00:05:49.960 --> 00:05:51.950 align:start position:0% <00:05:49.960>authenticators. <00:05:50.310>And <00:05:50.659>we're <00:05:51.010>passing <00:05:51.359>along 00:05:51.950 --> 00:05:51.960 align:start position:0% <00:05:51.950>And <00:05:51.953>we're <00:05:51.955>passing <00:05:51.959>along 00:05:51.960 --> 00:05:54.310 align:start position:0% <00:05:51.960>And <00:05:52.099>we're <00:05:52.239>passing <00:05:52.380>along <00:05:52.520>a <00:05:52.659>JSON <00:05:52.799>object. <00:05:52.940>And <00:05:53.080>inside <00:05:53.219>this <00:05:53.359>JSON 00:05:54.310 --> 00:05:54.320 align:start position:0% <00:05:54.310>a <00:05:54.311>JSON <00:05:54.313>object. <00:05:54.314>And <00:05:54.316>inside <00:05:54.317>this <00:05:54.319>JSON 00:05:54.320 --> 00:05:56.190 align:start position:0% <00:05:54.320>a <00:05:54.447>JSON <00:05:54.574>object. <00:05:54.701>And <00:05:54.829>inside <00:05:54.956>this <00:05:55.083>JSON <00:05:55.210>object, <00:05:55.338>we <00:05:55.465>find <00:05:55.592>something <00:05:55.719>really 00:05:56.190 --> 00:05:56.200 align:start position:0% <00:05:56.190>object, <00:05:56.192>we <00:05:56.194>find <00:05:56.196>something <00:05:56.199>really 00:05:56.200 --> 00:05:58.950 align:start position:0% <00:05:56.200>object, <00:05:56.327>we <00:05:56.454>find <00:05:56.581>something <00:05:56.709>really <00:05:56.836>important <00:05:56.963>and <00:05:57.090>crucial <00:05:57.218>by <00:05:57.345>this <00:05:57.472>all <00:05:57.599>thing 00:05:58.950 --> 00:05:58.960 align:start position:0% <00:05:58.950>important <00:05:58.951>and <00:05:58.953>crucial <00:05:58.954>by <00:05:58.955>this <00:05:58.957>all <00:05:58.959>thing 00:05:58.960 --> 00:06:00.990 align:start position:0% <00:05:58.960>important <00:05:59.115>and <00:05:59.271>crucial <00:05:59.426>by <00:05:59.582>this <00:05:59.737>all <00:05:59.893>thing <00:06:00.048>why <00:06:00.204>passkeys <00:06:00.359>works. 00:06:00.990 --> 00:06:01.000 align:start position:0% <00:06:00.990>why <00:06:00.994>passkeys <00:06:00.999>works. 00:06:01.000 --> 00:06:03.430 align:start position:0% <00:06:01.000>why <00:06:01.175>passkeys <00:06:01.350>works. <00:06:01.525>We're <00:06:01.700>having <00:06:01.875>this <00:06:02.050>relying <00:06:02.225>party <00:06:02.400>ID. 00:06:03.430 --> 00:06:03.440 align:start position:0% <00:06:03.430>We're <00:06:03.431>having <00:06:03.433>this <00:06:03.435>relying <00:06:03.437>party <00:06:03.439>ID. 00:06:03.440 --> 00:06:06.510 align:start position:0% <00:06:03.440>We're <00:06:03.567>having <00:06:03.694>this <00:06:03.821>relying <00:06:03.949>party <00:06:04.076>ID. <00:06:04.203>Inside <00:06:04.330>this <00:06:04.458>ID, <00:06:04.585>this <00:06:04.712>is <00:06:04.840>basically 00:06:06.510 --> 00:06:06.520 align:start position:0% <00:06:06.510>Inside <00:06:06.511>this <00:06:06.513>ID, <00:06:06.515>this <00:06:06.517>is <00:06:06.519>basically 00:06:06.520 --> 00:06:07.470 align:start position:0% <00:06:06.520>Inside <00:06:06.662>this <00:06:06.805>ID, <00:06:06.947>this <00:06:07.090>is <00:06:07.232>basically <00:06:07.375>um 00:06:07.470 --> 00:06:07.480 align:start position:0% um 00:06:07.480 --> 00:06:09.750 align:start position:0% <00:06:07.480>um <00:06:07.655>part <00:06:07.830>of <00:06:08.005>the <00:06:08.180>part <00:06:08.355>of <00:06:08.530>the <00:06:08.705>origin, <00:06:08.880>like 00:06:09.750 --> 00:06:09.760 align:start position:0% <00:06:09.750>part <00:06:09.751>of <00:06:09.752>the <00:06:09.753>part <00:06:09.755>of <00:06:09.756>the <00:06:09.757>origin, <00:06:09.759>like 00:06:09.760 --> 00:06:11.670 align:start position:0% <00:06:09.760>part <00:06:09.900>of <00:06:10.039>the <00:06:10.180>part <00:06:10.320>of <00:06:10.460>the <00:06:10.599>origin, <00:06:10.740>like <00:06:10.880>basically <00:06:11.020>the <00:06:11.159>domain, 00:06:11.670 --> 00:06:11.680 align:start position:0% <00:06:11.670>basically <00:06:11.674>the <00:06:11.679>domain, 00:06:11.680 --> 00:06:13.870 align:start position:0% <00:06:11.680>basically <00:06:11.880>the <00:06:12.080>domain, <00:06:12.280>which <00:06:12.480>tells <00:06:12.680>my <00:06:12.880>authenticator, <00:06:13.080>you're 00:06:13.870 --> 00:06:13.880 align:start position:0% <00:06:13.870>which <00:06:13.872>tells <00:06:13.874>my <00:06:13.876>authenticator, <00:06:13.879>you're 00:06:13.880 --> 00:06:16.710 align:start position:0% <00:06:13.880>which <00:06:14.007>tells <00:06:14.134>my <00:06:14.261>authenticator, <00:06:14.389>you're <00:06:14.516>just <00:06:14.643>allowed <00:06:14.770>to <00:06:14.898>use <00:06:15.025>this <00:06:15.152>passkey <00:06:15.280>for 00:06:16.710 --> 00:06:16.720 align:start position:0% <00:06:16.710>just <00:06:16.711>allowed <00:06:16.712>to <00:06:16.714>use <00:06:16.716>this <00:06:16.717>passkey <00:06:16.719>for 00:06:16.720 --> 00:06:18.870 align:start position:0% <00:06:16.720>just <00:06:16.860>allowed <00:06:17.000>to <00:06:17.140>use <00:06:17.280>this <00:06:17.420>passkey <00:06:17.560>for <00:06:17.700>this <00:06:17.840>kind <00:06:17.980>of <00:06:18.120>domain. 00:06:18.870 --> 00:06:18.880 align:start position:0% <00:06:18.870>this <00:06:18.873>kind <00:06:18.876>of <00:06:18.879>domain. 00:06:18.880 --> 00:06:21.190 align:start position:0% <00:06:18.880>this <00:06:18.996>kind <00:06:19.113>of <00:06:19.230>domain. <00:06:19.346>We <00:06:19.463>will <00:06:19.580>come <00:06:19.696>back <00:06:19.813>a <00:06:19.930>little <00:06:20.046>bit <00:06:20.163>later <00:06:20.280>in 00:06:21.190 --> 00:06:21.200 align:start position:0% <00:06:21.190>We <00:06:21.191>will <00:06:21.192>come <00:06:21.193>back <00:06:21.194>a <00:06:21.195>little <00:06:21.196>bit <00:06:21.197>later <00:06:21.199>in 00:06:21.200 --> 00:06:24.190 align:start position:0% <00:06:21.200>We <00:06:21.282>will <00:06:21.364>come <00:06:21.447>back <00:06:21.529>a <00:06:21.611>little <00:06:21.694>bit <00:06:21.776>later <00:06:21.858>in <00:06:21.941>how <00:06:22.023>to <00:06:22.105>maybe <00:06:22.188>still <00:06:22.270>mess <00:06:22.352>that <00:06:22.435>up, <00:06:22.517>but <00:06:22.599>um 00:06:24.190 --> 00:06:24.200 align:start position:0% <00:06:24.190>how <00:06:24.191>to <00:06:24.192>maybe <00:06:24.193>still <00:06:24.194>mess <00:06:24.195>that <00:06:24.196>up, <00:06:24.197>but <00:06:24.199>um 00:06:24.200 --> 00:06:26.510 align:start position:0% <00:06:24.200>how <00:06:24.282>to <00:06:24.364>maybe <00:06:24.447>still <00:06:24.529>mess <00:06:24.611>that <00:06:24.694>up, <00:06:24.776>but <00:06:24.858>um <00:06:24.941>so <00:06:25.023>far <00:06:25.105>so <00:06:25.188>good. <00:06:25.270>Apart <00:06:25.352>from <00:06:25.435>that, <00:06:25.517>you <00:06:25.599>can 00:06:26.510 --> 00:06:26.520 align:start position:0% <00:06:26.510>so <00:06:26.511>far <00:06:26.512>so <00:06:26.513>good. <00:06:26.514>Apart <00:06:26.515>from <00:06:26.516>that, <00:06:26.517>you <00:06:26.519>can 00:06:26.520 --> 00:06:29.230 align:start position:0% <00:06:26.520>so <00:06:26.620>far <00:06:26.719>so <00:06:26.820>good. <00:06:26.919>Apart <00:06:27.020>from <00:06:27.120>that, <00:06:27.219>you <00:06:27.320>can <00:06:27.419>also <00:06:27.520>even <00:06:27.620>tell <00:06:27.719>the <00:06:27.820>authenticator <00:06:27.919>what 00:06:29.230 --> 00:06:29.240 align:start position:0% <00:06:29.230>also <00:06:29.231>even <00:06:29.233>tell <00:06:29.235>the <00:06:29.237>authenticator <00:06:29.239>what 00:06:29.240 --> 00:06:31.670 align:start position:0% <00:06:29.240>also <00:06:29.356>even <00:06:29.473>tell <00:06:29.590>the <00:06:29.706>authenticator <00:06:29.823>what <00:06:29.940>kind <00:06:30.056>of <00:06:30.173>algorithm <00:06:30.290>should <00:06:30.406>be <00:06:30.523>used <00:06:30.640>to 00:06:31.670 --> 00:06:31.680 align:start position:0% <00:06:31.670>kind <00:06:31.671>of <00:06:31.673>algorithm <00:06:31.674>should <00:06:31.676>be <00:06:31.677>used <00:06:31.679>to 00:06:31.680 --> 00:06:34.110 align:start position:0% <00:06:31.680>kind <00:06:31.787>of <00:06:31.895>algorithm <00:06:32.003>should <00:06:32.110>be <00:06:32.218>used <00:06:32.326>to <00:06:32.433>create <00:06:32.541>this <00:06:32.649>public <00:06:32.756>private <00:06:32.864>key <00:06:32.972>pair. <00:06:33.080>As 00:06:34.110 --> 00:06:34.120 align:start position:0% <00:06:34.110>create <00:06:34.111>this <00:06:34.113>public <00:06:34.114>private <00:06:34.116>key <00:06:34.117>pair. <00:06:34.119>As 00:06:34.120 --> 00:06:36.430 align:start position:0% <00:06:34.120>create <00:06:34.227>this <00:06:34.335>public <00:06:34.443>private <00:06:34.550>key <00:06:34.658>pair. <00:06:34.766>As <00:06:34.873>we <00:06:34.981>all <00:06:35.089>know, <00:06:35.196>minus <00:06:35.304>seven <00:06:35.412>stands <00:06:35.520>for 00:06:36.430 --> 00:06:36.440 align:start position:0% <00:06:36.430>we <00:06:36.431>all <00:06:36.433>know, <00:06:36.434>minus <00:06:36.436>seven <00:06:36.437>stands <00:06:36.439>for 00:06:36.440 --> 00:06:40.110 align:start position:0% <00:06:36.440>we <00:06:36.567>all <00:06:36.694>know, <00:06:36.821>minus <00:06:36.949>seven <00:06:37.076>stands <00:06:37.203>for <00:06:37.330>ECDSA <00:06:37.458>with <00:06:37.585>SHA <00:06:37.712>uh <00:06:37.840>256. 00:06:40.110 --> 00:06:40.120 align:start position:0% <00:06:40.110>ECDSA <00:06:40.112>with <00:06:40.114>SHA <00:06:40.116>uh <00:06:40.119>256. 00:06:40.120 --> 00:06:43.350 align:start position:0% <00:06:40.120>ECDSA <00:06:40.236>with <00:06:40.353>SHA <00:06:40.470>uh <00:06:40.586>256. <00:06:40.703>This <00:06:40.820>is <00:06:40.936>often <00:06:41.053>the <00:06:41.170>default, <00:06:41.286>but <00:06:41.403>you <00:06:41.520>can 00:06:43.350 --> 00:06:43.360 align:start position:0% <00:06:43.350>This <00:06:43.351>is <00:06:43.352>often <00:06:43.353>the <00:06:43.355>default, <00:06:43.356>but <00:06:43.357>you <00:06:43.359>can 00:06:43.360 --> 00:06:45.110 align:start position:0% <00:06:43.360>This <00:06:43.460>is <00:06:43.560>often <00:06:43.660>the <00:06:43.760>default, <00:06:43.860>but <00:06:43.960>you <00:06:44.060>can <00:06:44.160>of <00:06:44.260>course <00:06:44.360>change <00:06:44.460>it <00:06:44.560>to <00:06:44.660>any <00:06:44.760>other 00:06:45.110 --> 00:06:45.120 align:start position:0% <00:06:45.110>of <00:06:45.111>course <00:06:45.113>change <00:06:45.114>it <00:06:45.116>to <00:06:45.117>any <00:06:45.119>other 00:06:45.120 --> 00:06:47.190 align:start position:0% <00:06:45.120>of <00:06:45.236>course <00:06:45.353>change <00:06:45.470>it <00:06:45.586>to <00:06:45.703>any <00:06:45.820>other <00:06:45.936>algorithm <00:06:46.053>which <00:06:46.170>you <00:06:46.286>find <00:06:46.403>way <00:06:46.520>more 00:06:47.190 --> 00:06:47.200 align:start position:0% <00:06:47.190>algorithm <00:06:47.191>which <00:06:47.193>you <00:06:47.195>find <00:06:47.197>way <00:06:47.199>more 00:06:47.200 --> 00:06:48.830 align:start position:0% <00:06:47.200>algorithm <00:06:47.433>which <00:06:47.666>you <00:06:47.900>find <00:06:48.133>way <00:06:48.366>more <00:06:48.599>secure. 00:06:48.830 --> 00:06:48.840 align:start position:0% secure. 00:06:48.840 --> 00:06:50.710 align:start position:0% <00:06:48.840>secure. <00:06:49.015>And <00:06:49.190>after <00:06:49.365>this <00:06:49.540>is <00:06:49.715>passed <00:06:49.890>along, <00:06:50.065>we <00:06:50.240>know 00:06:50.710 --> 00:06:50.720 align:start position:0% <00:06:50.710>And <00:06:50.711>after <00:06:50.712>this <00:06:50.713>is <00:06:50.715>passed <00:06:50.716>along, <00:06:50.717>we <00:06:50.719>know 00:06:50.720 --> 00:06:52.909 align:start position:0% <00:06:50.720>And <00:06:50.827>after <00:06:50.935>this <00:06:51.043>is <00:06:51.150>passed <00:06:51.258>along, <00:06:51.366>we <00:06:51.473>know <00:06:51.581>the <00:06:51.689>drill. <00:06:51.796>Our <00:06:51.904>authenticator <00:06:52.012>will <00:06:52.120>create 00:06:52.909 --> 00:06:52.919 align:start position:0% <00:06:52.909>the <00:06:52.910>drill. <00:06:52.912>Our <00:06:52.914>authenticator <00:06:52.916>will <00:06:52.918>create 00:06:52.919 --> 00:06:54.750 align:start position:0% <00:06:52.919>the <00:06:53.046>drill. <00:06:53.173>Our <00:06:53.300>authenticator <00:06:53.428>will <00:06:53.555>create <00:06:53.682>this <00:06:53.809>public <00:06:53.937>private <00:06:54.064>key <00:06:54.191>pair. <00:06:54.318>The 00:06:54.750 --> 00:06:54.760 align:start position:0% <00:06:54.750>this <00:06:54.751>public <00:06:54.753>private <00:06:54.755>key <00:06:54.757>pair. <00:06:54.759>The 00:06:54.760 --> 00:06:57.270 align:start position:0% <00:06:54.760>this <00:06:54.887>public <00:06:55.014>private <00:06:55.141>key <00:06:55.269>pair. <00:06:55.396>The <00:06:55.523>private <00:06:55.650>key <00:06:55.778>signs <00:06:55.905>the <00:06:56.032>challenge, <00:06:56.159>and 00:06:57.270 --> 00:06:57.280 align:start position:0% <00:06:57.270>private <00:06:57.271>key <00:06:57.273>signs <00:06:57.275>the <00:06:57.277>challenge, <00:06:57.279>and 00:06:57.280 --> 00:06:59.310 align:start position:0% <00:06:57.280>private <00:06:57.396>key <00:06:57.513>signs <00:06:57.630>the <00:06:57.746>challenge, <00:06:57.863>and <00:06:57.979>along <00:06:58.096>with <00:06:58.213>the <00:06:58.330>public <00:06:58.446>key, <00:06:58.563>it's <00:06:58.679>sent 00:06:59.310 --> 00:06:59.320 align:start position:0% <00:06:59.310>along <00:06:59.311>with <00:06:59.313>the <00:06:59.314>public <00:06:59.316>key, <00:06:59.317>it's <00:06:59.319>sent 00:06:59.320 --> 00:07:00.950 align:start position:0% <00:06:59.320>along <00:06:59.495>with <00:06:59.670>the <00:06:59.844>public <00:07:00.020>key, <00:07:00.195>it's <00:07:00.370>sent <00:07:00.545>back <00:07:00.719>basically 00:07:00.950 --> 00:07:00.960 align:start position:0% <00:07:00.950>back <00:07:00.959>basically 00:07:00.960 --> 00:07:03.790 align:start position:0% <00:07:00.960>back <00:07:01.115>basically <00:07:01.271>as <00:07:01.426>an <00:07:01.582>answer <00:07:01.737>to <00:07:01.893>this <00:07:02.048>great <00:07:02.204>uh <00:07:02.359>function 00:07:03.790 --> 00:07:03.800 align:start position:0% <00:07:03.790>as <00:07:03.791>an <00:07:03.792>answer <00:07:03.793>to <00:07:03.795>this <00:07:03.796>great <00:07:03.797>uh <00:07:03.799>function 00:07:03.800 --> 00:07:06.110 align:start position:0% <00:07:03.800>as <00:07:03.887>an <00:07:03.975>answer <00:07:04.062>to <00:07:04.150>this <00:07:04.237>great <00:07:04.325>uh <00:07:04.412>function <00:07:04.500>back <00:07:04.587>to <00:07:04.675>the <00:07:04.762>client <00:07:04.850>and <00:07:04.937>is <00:07:05.025>sent <00:07:05.112>back <00:07:05.200>to 00:07:06.110 --> 00:07:06.120 align:start position:0% <00:07:06.110>back <00:07:06.111>to <00:07:06.112>the <00:07:06.113>client <00:07:06.114>and <00:07:06.115>is <00:07:06.116>sent <00:07:06.117>back <00:07:06.119>to 00:07:06.120 --> 00:07:07.590 align:start position:0% <00:07:06.120>back <00:07:06.252>to <00:07:06.384>the <00:07:06.516>client <00:07:06.649>and <00:07:06.781>is <00:07:06.913>sent <00:07:07.046>back <00:07:07.178>to <00:07:07.310>the <00:07:07.443>server. 00:07:07.590 --> 00:07:07.600 align:start position:0% <00:07:07.590>the <00:07:07.599>server. 00:07:07.600 --> 00:07:09.550 align:start position:0% <00:07:07.600>the <00:07:07.775>server. <00:07:07.950>So, <00:07:08.125>the <00:07:08.300>server <00:07:08.475>stores <00:07:08.650>basically <00:07:08.825>just <00:07:09.000>the 00:07:09.550 --> 00:07:09.560 align:start position:0% <00:07:09.550>So, <00:07:09.551>the <00:07:09.553>server <00:07:09.554>stores <00:07:09.556>basically <00:07:09.557>just <00:07:09.559>the 00:07:09.560 --> 00:07:12.590 align:start position:0% <00:07:09.560>So, <00:07:09.667>the <00:07:09.775>server <00:07:09.883>stores <00:07:09.990>basically <00:07:10.098>just <00:07:10.206>the <00:07:10.313>private <00:07:10.421>uh <00:07:10.529>public <00:07:10.636>key, <00:07:10.744>and <00:07:10.852>of <00:07:10.960>course 00:07:12.590 --> 00:07:12.600 align:start position:0% <00:07:12.590>private <00:07:12.591>uh <00:07:12.592>public <00:07:12.594>key, <00:07:12.596>and <00:07:12.597>of <00:07:12.599>course 00:07:12.600 --> 00:07:14.350 align:start position:0% <00:07:12.600>private <00:07:12.727>uh <00:07:12.854>public <00:07:12.981>key, <00:07:13.109>and <00:07:13.236>of <00:07:13.363>course <00:07:13.490>verifies <00:07:13.618>the <00:07:13.745>challenge, <00:07:13.872>otherwise <00:07:14.000>it 00:07:14.350 --> 00:07:14.360 align:start position:0% <00:07:14.350>verifies <00:07:14.352>the <00:07:14.354>challenge, <00:07:14.356>otherwise <00:07:14.359>it 00:07:14.360 --> 00:07:16.430 align:start position:0% <00:07:14.360>verifies <00:07:14.515>the <00:07:14.671>challenge, <00:07:14.826>otherwise <00:07:14.982>it <00:07:15.137>wouldn't <00:07:15.293>make <00:07:15.448>sense <00:07:15.604>so <00:07:15.760>much. 00:07:16.430 --> 00:07:16.440 align:start position:0% <00:07:16.430>wouldn't <00:07:16.432>make <00:07:16.434>sense <00:07:16.436>so <00:07:16.439>much. 00:07:16.440 --> 00:07:18.710 align:start position:0% <00:07:16.440>wouldn't <00:07:16.547>make <00:07:16.655>sense <00:07:16.763>so <00:07:16.870>much. <00:07:16.978>And <00:07:17.086>all <00:07:17.193>what <00:07:17.301>is <00:07:17.409>in <00:07:17.516>a <00:07:17.624>database <00:07:17.732>of <00:07:17.840>the 00:07:18.710 --> 00:07:18.720 align:start position:0% <00:07:18.710>And <00:07:18.711>all <00:07:18.712>what <00:07:18.713>is <00:07:18.714>in <00:07:18.715>a <00:07:18.716>database <00:07:18.717>of <00:07:18.719>the 00:07:18.720 --> 00:07:21.070 align:start position:0% <00:07:18.720>And <00:07:18.807>all <00:07:18.895>what <00:07:18.982>is <00:07:19.070>in <00:07:19.157>a <00:07:19.245>database <00:07:19.332>of <00:07:19.420>the <00:07:19.507>server <00:07:19.595>is <00:07:19.682>of <00:07:19.770>course <00:07:19.857>the <00:07:19.945>public <00:07:20.032>key. <00:07:20.120>So, 00:07:21.070 --> 00:07:21.080 align:start position:0% <00:07:21.070>server <00:07:21.071>is <00:07:21.072>of <00:07:21.073>course <00:07:21.075>the <00:07:21.076>public <00:07:21.077>key. <00:07:21.079>So, 00:07:21.080 --> 00:07:23.030 align:start position:0% <00:07:21.080>server <00:07:21.187>is <00:07:21.295>of <00:07:21.403>course <00:07:21.510>the <00:07:21.618>public <00:07:21.726>key. <00:07:21.833>So, <00:07:21.941>no <00:07:22.049>shared <00:07:22.156>secret <00:07:22.264>anymore, <00:07:22.372>no <00:07:22.479>password 00:07:23.030 --> 00:07:23.040 align:start position:0% <00:07:23.030>no <00:07:23.031>shared <00:07:23.033>secret <00:07:23.035>anymore, <00:07:23.037>no <00:07:23.039>password 00:07:23.040 --> 00:07:25.150 align:start position:0% <00:07:23.040>no <00:07:23.156>shared <00:07:23.273>secret <00:07:23.390>anymore, <00:07:23.506>no <00:07:23.623>password <00:07:23.740>anymore. <00:07:23.856>That's <00:07:23.973>why <00:07:24.090>we <00:07:24.206>love <00:07:24.323>passkeys <00:07:24.440>as 00:07:25.150 --> 00:07:25.160 align:start position:0% <00:07:25.150>anymore. <00:07:25.151>That's <00:07:25.153>why <00:07:25.154>we <00:07:25.156>love <00:07:25.157>passkeys <00:07:25.159>as 00:07:25.160 --> 00:07:26.710 align:start position:0% <00:07:25.160>anymore. <00:07:25.315>That's <00:07:25.470>why <00:07:25.625>we <00:07:25.780>love <00:07:25.935>passkeys <00:07:26.090>as <00:07:26.245>well <00:07:26.400>so <00:07:26.555>much. 00:07:26.710 --> 00:07:26.720 align:start position:0% <00:07:26.710>well <00:07:26.714>so <00:07:26.719>much. 00:07:26.720 --> 00:07:29.550 align:start position:0% <00:07:26.720>well <00:07:26.860>so <00:07:27.000>much. <00:07:27.140>And <00:07:27.280>I <00:07:27.420>can't <00:07:27.560>emphasize <00:07:27.700>it <00:07:27.840>emphasize <00:07:27.980>it <00:07:28.120>um 00:07:29.550 --> 00:07:29.560 align:start position:0% <00:07:29.550>And <00:07:29.551>I <00:07:29.552>can't <00:07:29.553>emphasize <00:07:29.555>it <00:07:29.556>emphasize <00:07:29.557>it <00:07:29.559>um 00:07:29.560 --> 00:07:31.830 align:start position:0% <00:07:29.560>And <00:07:29.676>I <00:07:29.793>can't <00:07:29.910>emphasize <00:07:30.026>it <00:07:30.143>emphasize <00:07:30.260>it <00:07:30.376>um <00:07:30.493>enough. <00:07:30.610>Passkeys <00:07:30.726>are <00:07:30.843>really <00:07:30.960>strongly 00:07:31.830 --> 00:07:31.840 align:start position:0% <00:07:31.830>enough. <00:07:31.832>Passkeys <00:07:31.834>are <00:07:31.836>really <00:07:31.839>strongly 00:07:31.840 --> 00:07:35.630 align:start position:0% <00:07:31.840>enough. <00:07:31.956>Passkeys <00:07:32.073>are <00:07:32.190>really <00:07:32.306>strongly <00:07:32.423>bound <00:07:32.539>to <00:07:32.656>their <00:07:32.773>relying <00:07:32.890>party <00:07:33.006>ID. <00:07:33.123>I <00:07:33.239>can't 00:07:35.630 --> 00:07:35.640 align:start position:0% <00:07:35.630>bound <00:07:35.631>to <00:07:35.632>their <00:07:35.633>relying <00:07:35.635>party <00:07:35.636>ID. <00:07:35.637>I <00:07:35.639>can't 00:07:35.640 --> 00:07:38.510 align:start position:0% <00:07:35.640>bound <00:07:35.733>to <00:07:35.826>their <00:07:35.919>relying <00:07:36.013>party <00:07:36.106>ID. <00:07:36.200>I <00:07:36.293>can't <00:07:36.386>trick <00:07:36.479>the <00:07:36.573>browser <00:07:36.666>to <00:07:36.760>use <00:07:36.853>the <00:07:36.946>passkey <00:07:37.039>for 00:07:38.510 --> 00:07:38.520 align:start position:0% <00:07:38.510>trick <00:07:38.511>the <00:07:38.512>browser <00:07:38.513>to <00:07:38.515>use <00:07:38.516>the <00:07:38.517>passkey <00:07:38.519>for 00:07:38.520 --> 00:07:40.990 align:start position:0% <00:07:38.520>trick <00:07:38.636>the <00:07:38.753>browser <00:07:38.870>to <00:07:38.986>use <00:07:39.103>the <00:07:39.219>passkey <00:07:39.336>for <00:07:39.453>any <00:07:39.570>other <00:07:39.686>origin <00:07:39.803>or <00:07:39.919>domain. 00:07:40.990 --> 00:07:41.000 align:start position:0% <00:07:40.990>any <00:07:40.992>other <00:07:40.994>origin <00:07:40.996>or <00:07:40.999>domain. 00:07:41.000 --> 00:07:43.550 align:start position:0% <00:07:41.000>any <00:07:41.127>other <00:07:41.254>origin <00:07:41.381>or <00:07:41.509>domain. <00:07:41.636>And <00:07:41.763>that's <00:07:41.890>actually <00:07:42.018>one <00:07:42.145>of <00:07:42.272>the <00:07:42.400>reason 00:07:43.550 --> 00:07:43.560 align:start position:0% <00:07:43.550>And <00:07:43.551>that's <00:07:43.553>actually <00:07:43.554>one <00:07:43.556>of <00:07:43.557>the <00:07:43.559>reason 00:07:43.560 --> 00:07:46.190 align:start position:0% <00:07:43.560>And <00:07:43.676>that's <00:07:43.793>actually <00:07:43.910>one <00:07:44.026>of <00:07:44.143>the <00:07:44.260>reason <00:07:44.376>why <00:07:44.493>phishing <00:07:44.610>fails <00:07:44.726>with <00:07:44.843>passkeys. <00:07:44.960>They 00:07:46.190 --> 00:07:46.200 align:start position:0% <00:07:46.190>why <00:07:46.191>phishing <00:07:46.193>fails <00:07:46.195>with <00:07:46.197>passkeys. <00:07:46.199>They 00:07:46.200 --> 00:07:48.550 align:start position:0% <00:07:46.200>why <00:07:46.327>phishing <00:07:46.454>fails <00:07:46.581>with <00:07:46.709>passkeys. <00:07:46.836>They <00:07:46.963>are <00:07:47.090>strongly <00:07:47.218>bound <00:07:47.345>to <00:07:47.472>their <00:07:47.599>domain. 00:07:48.550 --> 00:07:48.560 align:start position:0% <00:07:48.550>are <00:07:48.551>strongly <00:07:48.553>bound <00:07:48.555>to <00:07:48.557>their <00:07:48.559>domain. 00:07:48.560 --> 00:07:50.550 align:start position:0% <00:07:48.560>are <00:07:48.676>strongly <00:07:48.793>bound <00:07:48.910>to <00:07:49.026>their <00:07:49.143>domain. <00:07:49.260>There <00:07:49.376>is <00:07:49.493>no <00:07:49.610>shared <00:07:49.726>secret <00:07:49.843>anymore. <00:07:49.960>So, 00:07:50.550 --> 00:07:50.560 align:start position:0% <00:07:50.550>There <00:07:50.551>is <00:07:50.553>no <00:07:50.554>shared <00:07:50.556>secret <00:07:50.557>anymore. <00:07:50.559>So, 00:07:50.560 --> 00:07:53.630 align:start position:0% <00:07:50.560>There <00:07:50.676>is <00:07:50.793>no <00:07:50.910>shared <00:07:51.026>secret <00:07:51.143>anymore. <00:07:51.260>So, <00:07:51.376>even <00:07:51.493>if <00:07:51.610>a <00:07:51.726>database <00:07:51.843>breach <00:07:51.960>somewhat 00:07:53.630 --> 00:07:53.640 align:start position:0% <00:07:53.630>even <00:07:53.631>if <00:07:53.633>a <00:07:53.635>database <00:07:53.637>breach <00:07:53.639>somewhat 00:07:53.640 --> 00:07:54.790 align:start position:0% <00:07:53.640>even <00:07:53.812>if <00:07:53.985>a <00:07:54.157>database <00:07:54.330>breach <00:07:54.502>somewhat <00:07:54.675>happens, 00:07:54.790 --> 00:07:54.800 align:start position:0% happens, 00:07:54.800 --> 00:07:57.470 align:start position:0% <00:07:54.800>happens, <00:07:54.975>all <00:07:55.150>the <00:07:55.325>attacker <00:07:55.500>gets <00:07:55.675>is <00:07:55.850>maybe <00:07:56.025>some <00:07:56.200>kind 00:07:57.470 --> 00:07:57.480 align:start position:0% <00:07:57.470>all <00:07:57.471>the <00:07:57.472>attacker <00:07:57.473>gets <00:07:57.475>is <00:07:57.476>maybe <00:07:57.477>some <00:07:57.479>kind 00:07:57.480 --> 00:08:00.230 align:start position:0% <00:07:57.480>all <00:07:57.580>the <00:07:57.680>attacker <00:07:57.780>gets <00:07:57.880>is <00:07:57.980>maybe <00:07:58.080>some <00:07:58.180>kind <00:07:58.280>of <00:07:58.380>public <00:07:58.480>keys. <00:07:58.580>So, <00:07:58.680>the <00:07:58.780>attacker <00:07:58.880>can 00:08:00.230 --> 00:08:00.240 align:start position:0% <00:08:00.230>of <00:08:00.231>public <00:08:00.233>keys. <00:08:00.234>So, <00:08:00.236>the <00:08:00.237>attacker <00:08:00.239>can 00:08:00.240 --> 00:08:01.950 align:start position:0% <00:08:00.240>of <00:08:00.347>public <00:08:00.455>keys. <00:08:00.563>So, <00:08:00.670>the <00:08:00.778>attacker <00:08:00.886>can <00:08:00.993>write <00:08:01.101>me <00:08:01.209>an <00:08:01.316>encrypted <00:08:01.424>love <00:08:01.532>letter <00:08:01.640>or 00:08:01.950 --> 00:08:01.960 align:start position:0% <00:08:01.950>write <00:08:01.951>me <00:08:01.953>an <00:08:01.954>encrypted <00:08:01.955>love <00:08:01.957>letter <00:08:01.959>or 00:08:01.960 --> 00:08:03.950 align:start position:0% <00:08:01.960>write <00:08:02.076>me <00:08:02.193>an <00:08:02.310>encrypted <00:08:02.426>love <00:08:02.543>letter <00:08:02.659>or <00:08:02.776>something, <00:08:02.893>but <00:08:03.010>nothing <00:08:03.126>more <00:08:03.243>with <00:08:03.359>that 00:08:03.950 --> 00:08:03.960 align:start position:0% <00:08:03.950>something, <00:08:03.951>but <00:08:03.953>nothing <00:08:03.955>more <00:08:03.957>with <00:08:03.959>that 00:08:03.960 --> 00:08:06.710 align:start position:0% <00:08:03.960>something, <00:08:04.076>but <00:08:04.193>nothing <00:08:04.310>more <00:08:04.426>with <00:08:04.543>that <00:08:04.659>basically. <00:08:04.776>It's <00:08:04.893>as <00:08:05.010>I <00:08:05.126>said <00:08:05.243>already, <00:08:05.359>and 00:08:06.710 --> 00:08:06.720 align:start position:0% <00:08:06.710>basically. <00:08:06.711>It's <00:08:06.712>as <00:08:06.714>I <00:08:06.716>said <00:08:06.717>already, <00:08:06.719>and 00:08:06.720 --> 00:08:08.430 align:start position:0% <00:08:06.720>basically. <00:08:06.847>It's <00:08:06.974>as <00:08:07.101>I <00:08:07.229>said <00:08:07.356>already, <00:08:07.483>and <00:08:07.610>built-in <00:08:07.738>replay <00:08:07.865>protection <00:08:07.992>with <00:08:08.120>this 00:08:08.430 --> 00:08:08.440 align:start position:0% <00:08:08.430>built-in <00:08:08.432>replay <00:08:08.434>protection <00:08:08.436>with <00:08:08.439>this 00:08:08.440 --> 00:08:10.550 align:start position:0% <00:08:08.440>built-in <00:08:08.640>replay <00:08:08.840>protection <00:08:09.040>with <00:08:09.240>this <00:08:09.440>one-time <00:08:09.640>use <00:08:09.840>challenge. 00:08:10.550 --> 00:08:10.560 align:start position:0% <00:08:10.550>one-time <00:08:10.554>use <00:08:10.559>challenge. 00:08:10.560 --> 00:08:13.510 align:start position:0% <00:08:10.560>one-time <00:08:10.715>use <00:08:10.871>challenge. <00:08:11.026>And <00:08:11.182>no <00:08:11.337>real <00:08:11.493>secret <00:08:11.648>can <00:08:11.804>be <00:08:11.960>intercepted. 00:08:13.510 --> 00:08:13.520 align:start position:0% <00:08:13.510>And <00:08:13.511>no <00:08:13.513>real <00:08:13.514>secret <00:08:13.515>can <00:08:13.517>be <00:08:13.519>intercepted. 00:08:13.520 --> 00:08:15.550 align:start position:0% <00:08:13.520>And <00:08:13.627>no <00:08:13.735>real <00:08:13.843>secret <00:08:13.950>can <00:08:14.058>be <00:08:14.166>intercepted. <00:08:14.273>We're <00:08:14.381>not <00:08:14.489>sending <00:08:14.596>the <00:08:14.704>private <00:08:14.812>key <00:08:14.919>along. 00:08:15.550 --> 00:08:15.560 align:start position:0% <00:08:15.550>We're <00:08:15.551>not <00:08:15.553>sending <00:08:15.554>the <00:08:15.556>private <00:08:15.557>key <00:08:15.559>along. 00:08:15.560 --> 00:08:18.390 align:start position:0% <00:08:15.560>We're <00:08:15.667>not <00:08:15.775>sending <00:08:15.883>the <00:08:15.990>private <00:08:16.098>key <00:08:16.206>along. <00:08:16.313>We're <00:08:16.421>not <00:08:16.529>sending <00:08:16.636>any <00:08:16.744>kind <00:08:16.852>of <00:08:16.960>um 00:08:18.390 --> 00:08:18.400 align:start position:0% <00:08:18.390>We're <00:08:18.391>not <00:08:18.393>sending <00:08:18.394>any <00:08:18.395>kind <00:08:18.397>of <00:08:18.399>um 00:08:18.400 --> 00:08:20.950 align:start position:0% <00:08:18.400>We're <00:08:18.507>not <00:08:18.615>sending <00:08:18.723>any <00:08:18.830>kind <00:08:18.938>of <00:08:19.046>um <00:08:19.153>password <00:08:19.261>or <00:08:19.369>or <00:08:19.476>anything <00:08:19.584>along <00:08:19.692>the <00:08:19.799>way. 00:08:20.950 --> 00:08:20.960 align:start position:0% <00:08:20.950>password <00:08:20.951>or <00:08:20.953>or <00:08:20.954>anything <00:08:20.955>along <00:08:20.957>the <00:08:20.959>way. 00:08:20.960 --> 00:08:23.630 align:start position:0% <00:08:20.960>password <00:08:21.060>or <00:08:21.159>or <00:08:21.260>anything <00:08:21.359>along <00:08:21.460>the <00:08:21.560>way. <00:08:21.659>Even <00:08:21.760>if <00:08:21.859>you <00:08:21.960>have <00:08:22.060>kind <00:08:22.159>of <00:08:22.260>broken <00:08:22.359>TLS, 00:08:23.630 --> 00:08:23.640 align:start position:0% <00:08:23.630>Even <00:08:23.631>if <00:08:23.632>you <00:08:23.633>have <00:08:23.635>kind <00:08:23.636>of <00:08:23.637>broken <00:08:23.639>TLS, 00:08:23.640 --> 00:08:25.990 align:start position:0% <00:08:23.640>Even <00:08:23.740>if <00:08:23.840>you <00:08:23.940>have <00:08:24.039>kind <00:08:24.140>of <00:08:24.240>broken <00:08:24.340>TLS, <00:08:24.440>there's <00:08:24.539>nothing <00:08:24.640>to <00:08:24.740>actually <00:08:24.840>be <00:08:24.940>able <00:08:25.039>to 00:08:25.990 --> 00:08:26.000 align:start position:0% <00:08:25.990>there's <00:08:25.991>nothing <00:08:25.993>to <00:08:25.994>actually <00:08:25.996>be <00:08:25.997>able <00:08:25.999>to 00:08:26.000 --> 00:08:28.510 align:start position:0% <00:08:26.000>there's <00:08:26.116>nothing <00:08:26.233>to <00:08:26.350>actually <00:08:26.466>be <00:08:26.583>able <00:08:26.700>to <00:08:26.816>intercept. <00:08:26.933>That's <00:08:27.050>why <00:08:27.166>we <00:08:27.283>love <00:08:27.400>passkeys 00:08:28.510 --> 00:08:28.520 align:start position:0% <00:08:28.510>intercept. <00:08:28.511>That's <00:08:28.513>why <00:08:28.515>we <00:08:28.517>love <00:08:28.519>passkeys 00:08:28.520 --> 00:08:29.750 align:start position:0% <00:08:28.520>intercept. <00:08:28.678>That's <00:08:28.836>why <00:08:28.994>we <00:08:29.152>love <00:08:29.310>passkeys <00:08:29.468>so <00:08:29.627>much. 00:08:29.750 --> 00:08:29.760 align:start position:0% <00:08:29.750>so <00:08:29.759>much. 00:08:29.760 --> 00:08:31.909 align:start position:0% <00:08:29.760>so <00:08:29.960>much. <00:08:30.159>But <00:08:30.360>of <00:08:30.560>course, <00:08:30.760>integrating <00:08:30.960>passkeys <00:08:31.159>now 00:08:31.909 --> 00:08:31.919 align:start position:0% <00:08:31.909>But <00:08:31.910>of <00:08:31.912>course, <00:08:31.914>integrating <00:08:31.916>passkeys <00:08:31.918>now 00:08:31.919 --> 00:08:34.310 align:start position:0% <00:08:31.919>But <00:08:32.035>of <00:08:32.152>course, <00:08:32.269>integrating <00:08:32.385>passkeys <00:08:32.502>now <00:08:32.619>in <00:08:32.735>our <00:08:32.852>web <00:08:32.968>application, <00:08:33.085>it <00:08:33.202>comes <00:08:33.318>with 00:08:34.310 --> 00:08:34.320 align:start position:0% <00:08:34.309>in <00:08:34.311>our <00:08:34.313>web <00:08:34.314>application, <00:08:34.316>it <00:08:34.317>comes <00:08:34.319>with 00:08:34.320 --> 00:08:36.390 align:start position:0% <00:08:34.320>in <00:08:34.413>our <00:08:34.506>web <00:08:34.600>application, <00:08:34.693>it <00:08:34.786>comes <00:08:34.880>with <00:08:34.973>some <00:08:35.066>pitfalls. <00:08:35.160>And <00:08:35.253>I <00:08:35.346>want <00:08:35.440>to <00:08:35.533>show <00:08:35.626>you <00:08:35.720>a 00:08:36.390 --> 00:08:36.400 align:start position:0% <00:08:36.390>some <00:08:36.391>pitfalls. <00:08:36.392>And <00:08:36.393>I <00:08:36.394>want <00:08:36.395>to <00:08:36.396>show <00:08:36.397>you <00:08:36.399>a 00:08:36.400 --> 00:08:39.230 align:start position:0% <00:08:36.400>some <00:08:36.487>pitfalls. <00:08:36.574>And <00:08:36.662>I <00:08:36.750>want <00:08:36.837>to <00:08:36.924>show <00:08:37.012>you <00:08:37.100>a <00:08:37.187>couple <00:08:37.275>of <00:08:37.362>those <00:08:37.449>and <00:08:37.537>how <00:08:37.625>to <00:08:37.712>avoid <00:08:37.799>them. 00:08:39.230 --> 00:08:39.240 align:start position:0% <00:08:39.230>couple <00:08:39.231>of <00:08:39.232>those <00:08:39.233>and <00:08:39.235>how <00:08:39.236>to <00:08:39.237>avoid <00:08:39.239>them. 00:08:39.240 --> 00:08:41.830 align:start position:0% <00:08:39.240>couple <00:08:39.327>of <00:08:39.414>those <00:08:39.502>and <00:08:39.590>how <00:08:39.677>to <00:08:39.765>avoid <00:08:39.852>them. <00:08:39.940>So, <00:08:40.027>first <00:08:40.115>of <00:08:40.202>all, <00:08:40.289>I <00:08:40.377>want <00:08:40.465>to <00:08:40.552>uh <00:08:40.640>use 00:08:41.830 --> 00:08:41.840 align:start position:0% <00:08:41.830>So, <00:08:41.831>first <00:08:41.832>of <00:08:41.833>all, <00:08:41.834>I <00:08:41.835>want <00:08:41.836>to <00:08:41.837>uh <00:08:41.839>use 00:08:41.840 --> 00:08:45.990 align:start position:0% <00:08:41.840>So, <00:08:41.947>first <00:08:42.055>of <00:08:42.163>all, <00:08:42.270>I <00:08:42.378>want <00:08:42.486>to <00:08:42.593>uh <00:08:42.701>use <00:08:42.809>Keycloak, <00:08:42.916>one <00:08:43.024>really <00:08:43.132>lovely <00:08:43.240>identity 00:08:45.990 --> 00:08:46.000 align:start position:0% <00:08:45.990>Keycloak, <00:08:45.992>one <00:08:45.994>really <00:08:45.996>lovely <00:08:45.999>identity 00:08:46.000 --> 00:08:48.550 align:start position:0% <00:08:46.000>Keycloak, <00:08:46.116>one <00:08:46.233>really <00:08:46.350>lovely <00:08:46.466>identity <00:08:46.583>provider <00:08:46.700>I <00:08:46.816>most <00:08:46.933>of <00:08:47.050>the <00:08:47.166>times <00:08:47.283>now <00:08:47.400>using 00:08:48.550 --> 00:08:48.560 align:start position:0% <00:08:48.550>provider <00:08:48.551>I <00:08:48.552>most <00:08:48.553>of <00:08:48.555>the <00:08:48.556>times <00:08:48.557>now <00:08:48.559>using 00:08:48.560 --> 00:08:49.710 align:start position:0% <00:08:48.560>provider <00:08:48.689>I <00:08:48.818>most <00:08:48.948>of <00:08:49.077>the <00:08:49.206>times <00:08:49.336>now <00:08:49.465>using <00:08:49.595>basically, 00:08:49.710 --> 00:08:49.720 align:start position:0% basically, 00:08:49.720 --> 00:08:53.230 align:start position:0% <00:08:49.720>basically, <00:08:49.875>um <00:08:50.031>and <00:08:50.186>show <00:08:50.342>you <00:08:50.497>how <00:08:50.653>to <00:08:50.808>integrate <00:08:50.964>it. <00:08:51.120>We 00:08:53.230 --> 00:08:53.240 align:start position:0% <00:08:53.230>um <00:08:53.231>and <00:08:53.232>show <00:08:53.233>you <00:08:53.234>how <00:08:53.235>to <00:08:53.236>integrate <00:08:53.237>it. <00:08:53.239>We 00:08:53.240 --> 00:08:55.150 align:start position:0% <00:08:53.240>um <00:08:53.333>and <00:08:53.426>show <00:08:53.520>you <00:08:53.613>how <00:08:53.706>to <00:08:53.800>integrate <00:08:53.893>it. <00:08:53.986>We <00:08:54.080>taking <00:08:54.173>shortly <00:08:54.266>look <00:08:54.360>in <00:08:54.453>the <00:08:54.546>realm <00:08:54.640>setup 00:08:55.150 --> 00:08:55.160 align:start position:0% <00:08:55.150>taking <00:08:55.151>shortly <00:08:55.153>look <00:08:55.154>in <00:08:55.156>the <00:08:55.157>realm <00:08:55.159>setup 00:08:55.160 --> 00:08:57.750 align:start position:0% <00:08:55.160>taking <00:08:55.300>shortly <00:08:55.439>look <00:08:55.579>in <00:08:55.719>the <00:08:55.860>realm <00:08:56.000>setup <00:08:56.140>and <00:08:56.280>enabling <00:08:56.420>passkey <00:08:56.560>basically, 00:08:57.750 --> 00:08:57.760 align:start position:0% <00:08:57.750>and <00:08:57.753>enabling <00:08:57.756>passkey <00:08:57.759>basically, 00:08:57.760 --> 00:08:59.950 align:start position:0% <00:08:57.760>and <00:08:57.876>enabling <00:08:57.993>passkey <00:08:58.110>basically, <00:08:58.226>um <00:08:58.343>how <00:08:58.460>to <00:08:58.576>set <00:08:58.693>the <00:08:58.810>relying <00:08:58.926>party <00:08:59.043>ID <00:08:59.160>base 00:08:59.950 --> 00:08:59.960 align:start position:0% <00:08:59.950>um <00:08:59.951>how <00:08:59.952>to <00:08:59.953>set <00:08:59.954>the <00:08:59.955>relying <00:08:59.956>party <00:08:59.957>ID <00:08:59.959>base 00:08:59.960 --> 00:09:02.150 align:start position:0% <00:08:59.960>um <00:09:00.060>how <00:09:00.160>to <00:09:00.260>set <00:09:00.360>the <00:09:00.460>relying <00:09:00.560>party <00:09:00.660>ID <00:09:00.760>base <00:09:00.860>and <00:09:00.960>and <00:09:01.060>making <00:09:01.160>some <00:09:01.260>configurations. <00:09:01.360>And 00:09:02.150 --> 00:09:02.160 align:start position:0% <00:09:02.150>and <00:09:02.151>and <00:09:02.153>making <00:09:02.155>some <00:09:02.157>configurations. <00:09:02.159>And 00:09:02.160 --> 00:09:04.190 align:start position:0% <00:09:02.160>and <00:09:02.315>and <00:09:02.471>making <00:09:02.626>some <00:09:02.782>configurations. <00:09:02.937>And <00:09:03.093>then <00:09:03.248>just <00:09:03.404>to <00:09:03.560>shortly 00:09:04.190 --> 00:09:04.200 align:start position:0% <00:09:04.190>then <00:09:04.193>just <00:09:04.196>to <00:09:04.199>shortly 00:09:04.200 --> 00:09:06.790 align:start position:0% <00:09:04.200>then <00:09:04.327>just <00:09:04.454>to <00:09:04.581>shortly <00:09:04.709>to <00:09:04.836>taking <00:09:04.963>a <00:09:05.090>look <00:09:05.218>how <00:09:05.345>you <00:09:05.472>can <00:09:05.600>register 00:09:06.790 --> 00:09:06.800 align:start position:0% <00:09:06.790>to <00:09:06.791>taking <00:09:06.792>a <00:09:06.793>look <00:09:06.795>how <00:09:06.796>you <00:09:06.797>can <00:09:06.799>register 00:09:06.800 --> 00:09:09.270 align:start position:0% <00:09:06.800>to <00:09:06.900>taking <00:09:07.000>a <00:09:07.099>look <00:09:07.199>how <00:09:07.300>you <00:09:07.400>can <00:09:07.500>register <00:09:07.599>now <00:09:07.699>passkey <00:09:07.800>and <00:09:07.900>how <00:09:08.000>you <00:09:08.099>can <00:09:08.199>authenticate 00:09:09.270 --> 00:09:09.280 align:start position:0% <00:09:09.270>now <00:09:09.271>passkey <00:09:09.273>and <00:09:09.274>how <00:09:09.276>you <00:09:09.277>can <00:09:09.279>authenticate 00:09:09.280 --> 00:09:10.910 align:start position:0% <00:09:09.280>now <00:09:09.420>passkey <00:09:09.560>and <00:09:09.699>how <00:09:09.839>you <00:09:09.980>can <00:09:10.120>authenticate <00:09:10.260>them <00:09:10.400>with <00:09:10.540>a <00:09:10.680>passkey. 00:09:10.910 --> 00:09:10.920 align:start position:0% <00:09:10.910>them <00:09:10.913>with <00:09:10.915>a <00:09:10.919>passkey. 00:09:10.920 --> 00:09:12.710 align:start position:0% <00:09:10.920>them <00:09:11.270>with <00:09:11.620>a <00:09:11.969>passkey. <00:09:12.319>So, 00:09:12.710 --> 00:09:12.720 align:start position:0% So, 00:09:12.720 --> 00:09:14.910 align:start position:0% <00:09:12.720>So, <00:09:12.920>here <00:09:13.120>again, <00:09:13.320>maybe <00:09:13.520>if <00:09:13.720>you <00:09:13.920>visited <00:09:14.120>the 00:09:14.910 --> 00:09:14.920 align:start position:0% <00:09:14.910>here <00:09:14.911>again, <00:09:14.913>maybe <00:09:14.914>if <00:09:14.915>you <00:09:14.917>visited <00:09:14.919>the 00:09:14.920 --> 00:09:17.390 align:start position:0% <00:09:14.920>here <00:09:15.020>again, <00:09:15.120>maybe <00:09:15.219>if <00:09:15.319>you <00:09:15.420>visited <00:09:15.520>the <00:09:15.620>last <00:09:15.719>talk, <00:09:15.819>you <00:09:15.920>saw <00:09:16.020>this <00:09:16.120>already. <00:09:16.219>We <00:09:16.319>are 00:09:17.390 --> 00:09:17.400 align:start position:0% <00:09:17.390>last <00:09:17.391>talk, <00:09:17.392>you <00:09:17.393>saw <00:09:17.395>this <00:09:17.396>already. <00:09:17.397>We <00:09:17.399>are 00:09:17.400 --> 00:09:21.150 align:start position:0% <00:09:17.400>last <00:09:17.493>talk, <00:09:17.586>you <00:09:17.680>saw <00:09:17.773>this <00:09:17.866>already. <00:09:17.959>We <00:09:18.053>are <00:09:18.146>here <00:09:18.240>in <00:09:18.333>the <00:09:18.426>realm <00:09:18.520>setup. <00:09:18.613>And <00:09:18.706>I'm <00:09:18.800>right 00:09:21.150 --> 00:09:21.160 align:start position:0% <00:09:21.150>here <00:09:21.151>in <00:09:21.152>the <00:09:21.153>realm <00:09:21.155>setup. <00:09:21.156>And <00:09:21.157>I'm <00:09:21.159>right 00:09:21.160 --> 00:09:23.190 align:start position:0% <00:09:21.160>here <00:09:21.260>in <00:09:21.360>the <00:09:21.459>realm <00:09:21.560>setup. <00:09:21.660>And <00:09:21.760>I'm <00:09:21.860>right <00:09:21.959>now <00:09:22.060>here <00:09:22.160>in <00:09:22.260>the <00:09:22.360>authentication. <00:09:22.459>So, <00:09:22.560>here 00:09:23.190 --> 00:09:23.200 align:start position:0% <00:09:23.190>now <00:09:23.191>here <00:09:23.193>in <00:09:23.194>the <00:09:23.196>authentication. <00:09:23.197>So, <00:09:23.199>here 00:09:23.200 --> 00:09:25.190 align:start position:0% <00:09:23.200>now <00:09:23.316>here <00:09:23.433>in <00:09:23.550>the <00:09:23.666>authentication. <00:09:23.783>So, <00:09:23.900>here <00:09:24.016>you <00:09:24.133>have <00:09:24.250>another <00:09:24.366>tab. <00:09:24.483>It's <00:09:24.600>called 00:09:25.190 --> 00:09:25.200 align:start position:0% <00:09:25.190>you <00:09:25.191>have <00:09:25.193>another <00:09:25.195>tab. <00:09:25.197>It's <00:09:25.199>called 00:09:25.200 --> 00:09:27.510 align:start position:0% <00:09:25.200>you <00:09:25.316>have <00:09:25.433>another <00:09:25.550>tab. <00:09:25.666>It's <00:09:25.783>called <00:09:25.900>policies. <00:09:26.016>And <00:09:26.133>here <00:09:26.250>we <00:09:26.366>have <00:09:26.483>now <00:09:26.600>the 00:09:27.510 --> 00:09:27.520 align:start position:0% <00:09:27.510>policies. <00:09:27.511>And <00:09:27.513>here <00:09:27.514>we <00:09:27.516>have <00:09:27.517>now <00:09:27.519>the 00:09:27.520 --> 00:09:30.510 align:start position:0% <00:09:27.520>policies. <00:09:27.647>And <00:09:27.774>here <00:09:27.901>we <00:09:28.029>have <00:09:28.156>now <00:09:28.283>the <00:09:28.410>beautiful <00:09:28.538>policy <00:09:28.665>for <00:09:28.792>a <00:09:28.920>WebAuthn 00:09:30.510 --> 00:09:30.520 align:start position:0% <00:09:30.510>beautiful <00:09:30.512>policy <00:09:30.514>for <00:09:30.516>a <00:09:30.519>WebAuthn 00:09:30.520 --> 00:09:32.870 align:start position:0% <00:09:30.520>beautiful <00:09:30.675>policy <00:09:30.831>for <00:09:30.986>a <00:09:31.142>WebAuthn <00:09:31.297>passwordless. <00:09:31.453>And <00:09:31.608>there's <00:09:31.764>actually <00:09:31.920>the 00:09:32.870 --> 00:09:32.880 align:start position:0% <00:09:32.870>passwordless. <00:09:32.872>And <00:09:32.874>there's <00:09:32.876>actually <00:09:32.879>the 00:09:32.880 --> 00:09:35.310 align:start position:0% <00:09:32.880>passwordless. <00:09:33.007>And <00:09:33.134>there's <00:09:33.261>actually <00:09:33.389>the <00:09:33.516>place <00:09:33.643>where <00:09:33.770>you <00:09:33.898>can <00:09:34.025>enable <00:09:34.152>passkey. <00:09:34.280>So, 00:09:35.310 --> 00:09:35.320 align:start position:0% <00:09:35.310>place <00:09:35.311>where <00:09:35.313>you <00:09:35.314>can <00:09:35.316>enable <00:09:35.317>passkey. <00:09:35.319>So, 00:09:35.320 --> 00:09:37.750 align:start position:0% <00:09:35.320>place <00:09:35.413>where <00:09:35.506>you <00:09:35.600>can <00:09:35.693>enable <00:09:35.786>passkey. <00:09:35.880>So, <00:09:35.973>you <00:09:36.066>can <00:09:36.160>give <00:09:36.253>it <00:09:36.346>a <00:09:36.440>name. <00:09:36.533>You <00:09:36.626>can <00:09:36.720>define 00:09:37.750 --> 00:09:37.760 align:start position:0% <00:09:37.750>you <00:09:37.751>can <00:09:37.752>give <00:09:37.753>it <00:09:37.754>a <00:09:37.755>name. <00:09:37.756>You <00:09:37.757>can <00:09:37.759>define 00:09:37.760 --> 00:09:39.510 align:start position:0% <00:09:37.760>you <00:09:37.860>can <00:09:37.960>give <00:09:38.060>it <00:09:38.160>a <00:09:38.260>name. <00:09:38.360>You <00:09:38.460>can <00:09:38.560>define <00:09:38.660>what <00:09:38.760>kind <00:09:38.860>of <00:09:38.960>signature <00:09:39.060>algorithms <00:09:39.160>you 00:09:39.510 --> 00:09:39.520 align:start position:0% <00:09:39.510>what <00:09:39.511>kind <00:09:39.513>of <00:09:39.515>signature <00:09:39.517>algorithms <00:09:39.519>you 00:09:39.520 --> 00:09:41.910 align:start position:0% <00:09:39.520>what <00:09:39.636>kind <00:09:39.753>of <00:09:39.870>signature <00:09:39.986>algorithms <00:09:40.103>you <00:09:40.220>want <00:09:40.336>to <00:09:40.453>use, <00:09:40.569>and <00:09:40.686>here's <00:09:40.803>the <00:09:40.920>relying 00:09:41.910 --> 00:09:41.920 align:start position:0% <00:09:41.910>want <00:09:41.911>to <00:09:41.913>use, <00:09:41.914>and <00:09:41.915>here's <00:09:41.917>the <00:09:41.919>relying 00:09:41.920 --> 00:09:43.710 align:start position:0% <00:09:41.920>want <00:09:42.027>to <00:09:42.135>use, <00:09:42.243>and <00:09:42.350>here's <00:09:42.458>the <00:09:42.566>relying <00:09:42.673>party <00:09:42.781>ID. <00:09:42.889>Right <00:09:42.996>now, <00:09:43.104>it's <00:09:43.212>kind <00:09:43.319>of 00:09:43.710 --> 00:09:43.720 align:start position:0% <00:09:43.710>party <00:09:43.711>ID. <00:09:43.713>Right <00:09:43.714>now, <00:09:43.716>it's <00:09:43.717>kind <00:09:43.719>of 00:09:43.720 --> 00:09:45.350 align:start position:0% <00:09:43.720>party <00:09:43.836>ID. <00:09:43.953>Right <00:09:44.070>now, <00:09:44.186>it's <00:09:44.303>kind <00:09:44.420>of <00:09:44.536>boring, <00:09:44.653>it's <00:09:44.770>just <00:09:44.886>localhost <00:09:45.003>because <00:09:45.120>my 00:09:45.350 --> 00:09:45.360 align:start position:0% <00:09:45.350>boring, <00:09:45.351>it's <00:09:45.353>just <00:09:45.355>localhost <00:09:45.357>because <00:09:45.359>my 00:09:45.360 --> 00:09:47.590 align:start position:0% <00:09:45.360>boring, <00:09:45.515>it's <00:09:45.671>just <00:09:45.826>localhost <00:09:45.982>because <00:09:46.137>my <00:09:46.293>Keycloak <00:09:46.448>runs <00:09:46.604>on <00:09:46.760>localhost. 00:09:47.590 --> 00:09:47.600 align:start position:0% <00:09:47.590>Keycloak <00:09:47.593>runs <00:09:47.596>on <00:09:47.599>localhost. 00:09:47.600 --> 00:09:49.830 align:start position:0% <00:09:47.600>Keycloak <00:09:47.707>runs <00:09:47.815>on <00:09:47.923>localhost. <00:09:48.030>And <00:09:48.138>I <00:09:48.246>will <00:09:48.353>come, <00:09:48.461>as <00:09:48.569>I <00:09:48.676>said, <00:09:48.784>a <00:09:48.892>little <00:09:49.000>bit 00:09:49.830 --> 00:09:49.840 align:start position:0% <00:09:49.830>And <00:09:49.831>I <00:09:49.832>will <00:09:49.833>come, <00:09:49.834>as <00:09:49.835>I <00:09:49.836>said, <00:09:49.837>a <00:09:49.838>little <00:09:49.839>bit 00:09:49.840 --> 00:09:52.110 align:start position:0% <00:09:49.840>And <00:09:49.922>I <00:09:50.004>will <00:09:50.087>come, <00:09:50.169>as <00:09:50.251>I <00:09:50.334>said, <00:09:50.416>a <00:09:50.498>little <00:09:50.581>bit <00:09:50.663>again <00:09:50.745>to <00:09:50.828>it <00:09:50.910>later <00:09:50.992>how <00:09:51.075>to <00:09:51.157>set <00:09:51.240>it 00:09:52.110 --> 00:09:52.120 align:start position:0% <00:09:52.110>again <00:09:52.111>to <00:09:52.112>it <00:09:52.113>later <00:09:52.115>how <00:09:52.116>to <00:09:52.117>set <00:09:52.119>it 00:09:52.120 --> 00:09:54.550 align:start position:0% <00:09:52.120>again <00:09:52.236>to <00:09:52.353>it <00:09:52.470>later <00:09:52.586>how <00:09:52.703>to <00:09:52.820>set <00:09:52.936>it <00:09:53.053>properly. <00:09:53.170>There <00:09:53.286>other <00:09:53.403>Actually, <00:09:53.520>it's 00:09:54.550 --> 00:09:54.560 align:start position:0% <00:09:54.550>properly. <00:09:54.552>There <00:09:54.554>other <00:09:54.556>Actually, <00:09:54.559>it's 00:09:54.560 --> 00:09:55.550 align:start position:0% <00:09:54.560>properly. <00:09:54.649>There <00:09:54.738>other <00:09:54.827>Actually, <00:09:54.916>it's <00:09:55.005>really <00:09:55.094>great. <00:09:55.183>There <00:09:55.272>are <00:09:55.361>so <00:09:55.450>many 00:09:55.550 --> 00:09:55.560 align:start position:0% <00:09:55.550>really <00:09:55.551>great. <00:09:55.553>There <00:09:55.555>are <00:09:55.557>so <00:09:55.559>many 00:09:55.560 --> 00:09:57.670 align:start position:0% <00:09:55.560>really <00:09:55.715>great. <00:09:55.871>There <00:09:56.026>are <00:09:56.182>so <00:09:56.337>many <00:09:56.493>configurations <00:09:56.648>you <00:09:56.804>can <00:09:56.959>do. 00:09:57.670 --> 00:09:57.680 align:start position:0% <00:09:57.670>configurations <00:09:57.673>you <00:09:57.675>can <00:09:57.679>do. 00:09:57.680 --> 00:10:00.390 align:start position:0% <00:09:57.680>configurations <00:09:57.835>you <00:09:57.991>can <00:09:58.146>do. <00:09:58.302>But, <00:09:58.457>of <00:09:58.613>course, <00:09:58.768>many <00:09:58.924>configurations <00:09:59.079>that 00:10:00.390 --> 00:10:00.400 align:start position:0% <00:10:00.390>But, <00:10:00.391>of <00:10:00.393>course, <00:10:00.395>many <00:10:00.397>configurations <00:10:00.399>that 00:10:00.400 --> 00:10:03.390 align:start position:0% <00:10:00.400>But, <00:10:00.507>of <00:10:00.615>course, <00:10:00.723>many <00:10:00.830>configurations <00:10:00.938>that <00:10:01.046>maybe <00:10:01.153>can <00:10:01.261>lead <00:10:01.369>to <00:10:01.476>a <00:10:01.584>weak <00:10:01.692>weak <00:10:01.800>passkey 00:10:03.390 --> 00:10:03.400 align:start position:0% <00:10:03.390>maybe <00:10:03.391>can <00:10:03.392>lead <00:10:03.393>to <00:10:03.395>a <00:10:03.396>weak <00:10:03.397>weak <00:10:03.399>passkey 00:10:03.400 --> 00:10:06.350 align:start position:0% <00:10:03.400>maybe <00:10:03.493>can <00:10:03.586>lead <00:10:03.680>to <00:10:03.773>a <00:10:03.866>weak <00:10:03.959>weak <00:10:04.053>passkey <00:10:04.146>use, <00:10:04.240>and <00:10:04.333>that's <00:10:04.426>what <00:10:04.520>I <00:10:04.613>want <00:10:04.706>to <00:10:04.800>showcase. 00:10:06.350 --> 00:10:06.360 align:start position:0% <00:10:06.350>use, <00:10:06.351>and <00:10:06.352>that's <00:10:06.353>what <00:10:06.355>I <00:10:06.356>want <00:10:06.357>to <00:10:06.359>showcase. 00:10:06.360 --> 00:10:08.950 align:start position:0% <00:10:06.360>use, <00:10:06.453>and <00:10:06.546>that's <00:10:06.640>what <00:10:06.733>I <00:10:06.826>want <00:10:06.920>to <00:10:07.013>showcase. <00:10:07.106>Um <00:10:07.200>but <00:10:07.293>one <00:10:07.386>important <00:10:07.480>thing <00:10:07.573>what <00:10:07.666>I <00:10:07.760>want 00:10:08.950 --> 00:10:08.960 align:start position:0% <00:10:08.950>Um <00:10:08.951>but <00:10:08.952>one <00:10:08.953>important <00:10:08.955>thing <00:10:08.956>what <00:10:08.957>I <00:10:08.959>want 00:10:08.960 --> 00:10:12.030 align:start position:0% <00:10:08.960>Um <00:10:09.067>but <00:10:09.175>one <00:10:09.283>important <00:10:09.390>thing <00:10:09.498>what <00:10:09.606>I <00:10:09.713>want <00:10:09.821>to <00:10:09.929>already <00:10:10.036>mention <00:10:10.144>is <00:10:10.252>the <00:10:10.360>authenticator 00:10:12.030 --> 00:10:12.040 align:start position:0% <00:10:12.030>to <00:10:12.031>already <00:10:12.033>mention <00:10:12.035>is <00:10:12.037>the <00:10:12.039>authenticator 00:10:12.040 --> 00:10:15.550 align:start position:0% <00:10:12.040>to <00:10:12.180>already <00:10:12.319>mention <00:10:12.459>is <00:10:12.599>the <00:10:12.740>authenticator <00:10:12.880>attachment. <00:10:13.020>This <00:10:13.160>basically <00:10:13.300>tells <00:10:13.439>what 00:10:15.550 --> 00:10:15.560 align:start position:0% <00:10:15.550>attachment. <00:10:15.552>This <00:10:15.554>basically <00:10:15.556>tells <00:10:15.559>what 00:10:15.560 --> 00:10:17.910 align:start position:0% <00:10:15.560>attachment. <00:10:15.687>This <00:10:15.814>basically <00:10:15.941>tells <00:10:16.069>what <00:10:16.196>kind <00:10:16.323>of <00:10:16.450>authenticators <00:10:16.578>are <00:10:16.705>allowed <00:10:16.832>to <00:10:16.959>be 00:10:17.910 --> 00:10:17.920 align:start position:0% <00:10:17.910>kind <00:10:17.911>of <00:10:17.913>authenticators <00:10:17.914>are <00:10:17.915>allowed <00:10:17.917>to <00:10:17.919>be 00:10:17.920 --> 00:10:19.030 align:start position:0% <00:10:17.920>kind <00:10:18.062>of <00:10:18.205>authenticators <00:10:18.348>are <00:10:18.490>allowed <00:10:18.633>to <00:10:18.776>be <00:10:18.919>used. 00:10:19.030 --> 00:10:19.040 align:start position:0% used. 00:10:19.040 --> 00:10:21.150 align:start position:0% <00:10:19.040>used. <00:10:19.240>Here <00:10:19.439>we <00:10:19.640>have <00:10:19.839>cross-plat- <00:10:20.040>we <00:10:20.240>have <00:10:20.439>have 00:10:21.150 --> 00:10:21.160 align:start position:0% <00:10:21.150>Here <00:10:21.151>we <00:10:21.153>have <00:10:21.154>cross-plat- <00:10:21.156>we <00:10:21.157>have <00:10:21.159>have 00:10:21.160 --> 00:10:23.430 align:start position:0% <00:10:21.160>Here <00:10:21.300>we <00:10:21.439>have <00:10:21.579>cross-plat- <00:10:21.719>we <00:10:21.860>have <00:10:22.000>have <00:10:22.140>cross-platform <00:10:22.280>and <00:10:22.420>platform. <00:10:22.560>Platform 00:10:23.430 --> 00:10:23.440 align:start position:0% <00:10:23.430>cross-platform <00:10:23.433>and <00:10:23.436>platform. <00:10:23.439>Platform 00:10:23.440 --> 00:10:25.430 align:start position:0% <00:10:23.440>cross-platform <00:10:23.640>and <00:10:23.840>platform. <00:10:24.040>Platform <00:10:24.240>basically <00:10:24.440>is <00:10:24.640>also <00:10:24.840>called 00:10:25.430 --> 00:10:25.440 align:start position:0% <00:10:25.430>basically <00:10:25.433>is <00:10:25.436>also <00:10:25.439>called 00:10:25.440 --> 00:10:28.630 align:start position:0% <00:10:25.440>basically <00:10:25.640>is <00:10:25.840>also <00:10:26.040>called <00:10:26.240>hardware-bounded <00:10:26.440>passkeys, <00:10:26.640>like <00:10:26.840>passkeys 00:10:28.630 --> 00:10:28.640 align:start position:0% <00:10:28.630>hardware-bounded <00:10:28.633>passkeys, <00:10:28.636>like <00:10:28.639>passkeys 00:10:28.640 --> 00:10:30.990 align:start position:0% <00:10:28.640>hardware-bounded <00:10:28.767>passkeys, <00:10:28.894>like <00:10:29.021>passkeys <00:10:29.149>that <00:10:29.276>are <00:10:29.403>inside <00:10:29.530>your <00:10:29.658>TBN <00:10:29.785>in <00:10:29.912>a <00:10:30.040>secure 00:10:30.990 --> 00:10:31.000 align:start position:0% <00:10:30.990>that <00:10:30.991>are <00:10:30.992>inside <00:10:30.993>your <00:10:30.995>TBN <00:10:30.996>in <00:10:30.997>a <00:10:30.999>secure 00:10:31.000 --> 00:10:34.430 align:start position:0% <00:10:31.000>that <00:10:31.116>are <00:10:31.233>inside <00:10:31.350>your <00:10:31.466>TBN <00:10:31.583>in <00:10:31.700>a <00:10:31.816>secure <00:10:31.933>enclave. <00:10:32.050>And <00:10:32.166>cross-platform <00:10:32.283>passkeys <00:10:32.400>are 00:10:34.430 --> 00:10:34.440 align:start position:0% <00:10:34.430>enclave. <00:10:34.432>And <00:10:34.434>cross-platform <00:10:34.436>passkeys <00:10:34.439>are 00:10:34.440 --> 00:10:36.750 align:start position:0% <00:10:34.440>enclave. <00:10:34.580>And <00:10:34.720>cross-platform <00:10:34.860>passkeys <00:10:35.000>are <00:10:35.140>authenticators <00:10:35.280>that <00:10:35.420>can <00:10:35.560>be <00:10:35.700>used <00:10:35.840>on 00:10:36.750 --> 00:10:36.760 align:start position:0% <00:10:36.750>authenticators <00:10:36.751>that <00:10:36.753>can <00:10:36.755>be <00:10:36.757>used <00:10:36.759>on 00:10:36.760 --> 00:10:38.270 align:start position:0% <00:10:36.760>authenticators <00:10:36.883>that <00:10:37.007>can <00:10:37.130>be <00:10:37.254>used <00:10:37.377>on <00:10:37.501>different <00:10:37.624>kind <00:10:37.748>of <00:10:37.871>platforms, <00:10:37.995>like <00:10:38.119>a 00:10:38.270 --> 00:10:38.280 align:start position:0% <00:10:38.270>different <00:10:38.271>kind <00:10:38.273>of <00:10:38.275>platforms, <00:10:38.277>like <00:10:38.279>a 00:10:38.280 --> 00:10:40.590 align:start position:0% <00:10:38.280>different <00:10:38.396>kind <00:10:38.513>of <00:10:38.630>platforms, <00:10:38.746>like <00:10:38.863>a <00:10:38.980>YubiKey. <00:10:39.096>You <00:10:39.213>can <00:10:39.329>use <00:10:39.446>a <00:10:39.563>YubiKey <00:10:39.680>on 00:10:40.590 --> 00:10:40.600 align:start position:0% <00:10:40.590>YubiKey. <00:10:40.591>You <00:10:40.593>can <00:10:40.594>use <00:10:40.596>a <00:10:40.597>YubiKey <00:10:40.599>on 00:10:40.600 --> 00:10:42.310 align:start position:0% <00:10:40.600>YubiKey. <00:10:40.707>You <00:10:40.815>can <00:10:40.923>use <00:10:41.030>a <00:10:41.138>YubiKey <00:10:41.246>on <00:10:41.353>different <00:10:41.461>kind <00:10:41.569>of <00:10:41.676>laptops, <00:10:41.784>you <00:10:41.892>just <00:10:42.000>need 00:10:42.310 --> 00:10:42.320 align:start position:0% <00:10:42.310>different <00:10:42.311>kind <00:10:42.313>of <00:10:42.314>laptops, <00:10:42.316>you <00:10:42.317>just <00:10:42.319>need 00:10:42.320 --> 00:10:45.310 align:start position:0% <00:10:42.320>different <00:10:42.407>kind <00:10:42.495>of <00:10:42.582>laptops, <00:10:42.670>you <00:10:42.757>just <00:10:42.845>need <00:10:42.932>to <00:10:43.020>um <00:10:43.107>plug <00:10:43.195>it <00:10:43.282>in, <00:10:43.370>and <00:10:43.457>then <00:10:43.545>you <00:10:43.632>can <00:10:43.720>use 00:10:45.310 --> 00:10:45.320 align:start position:0% <00:10:45.310>to <00:10:45.310>um <00:10:45.312>plug <00:10:45.313>it <00:10:45.314>in, <00:10:45.315>and <00:10:45.316>then <00:10:45.317>you <00:10:45.318>can <00:10:45.319>use 00:10:45.320 --> 00:10:47.470 align:start position:0% <00:10:45.320>to <00:10:45.407>um <00:10:45.495>plug <00:10:45.582>it <00:10:45.670>in, <00:10:45.757>and <00:10:45.845>then <00:10:45.932>you <00:10:46.020>can <00:10:46.107>use <00:10:46.195>the <00:10:46.282>passkey <00:10:46.370>that <00:10:46.457>is <00:10:46.545>basically <00:10:46.632>on <00:10:46.720>this 00:10:47.470 --> 00:10:47.480 align:start position:0% <00:10:47.470>the <00:10:47.471>passkey <00:10:47.473>that <00:10:47.474>is <00:10:47.476>basically <00:10:47.477>on <00:10:47.479>this 00:10:47.480 --> 00:10:49.550 align:start position:0% <00:10:47.480>the <00:10:47.635>passkey <00:10:47.791>that <00:10:47.946>is <00:10:48.102>basically <00:10:48.257>on <00:10:48.413>this <00:10:48.568>kind <00:10:48.724>of <00:10:48.880>YubiKey. 00:10:49.550 --> 00:10:49.560 align:start position:0% <00:10:49.550>kind <00:10:49.554>of <00:10:49.559>YubiKey. 00:10:49.560 --> 00:10:52.270 align:start position:0% <00:10:49.560>kind <00:10:49.687>of <00:10:49.814>YubiKey. <00:10:49.941>So, <00:10:50.069>you <00:10:50.196>as <00:10:50.323>a <00:10:50.450>server <00:10:50.578>or <00:10:50.705>as <00:10:50.832>a <00:10:50.959>Keycloak, 00:10:52.270 --> 00:10:52.280 align:start position:0% <00:10:52.270>So, <00:10:52.271>you <00:10:52.272>as <00:10:52.273>a <00:10:52.274>server <00:10:52.275>or <00:10:52.276>as <00:10:52.277>a <00:10:52.279>Keycloak, 00:10:52.280 --> 00:10:54.470 align:start position:0% <00:10:52.280>So, <00:10:52.373>you <00:10:52.466>as <00:10:52.560>a <00:10:52.653>server <00:10:52.746>or <00:10:52.839>as <00:10:52.933>a <00:10:53.026>Keycloak, <00:10:53.120>you <00:10:53.213>can <00:10:53.306>just <00:10:53.400>decide <00:10:53.493>actually <00:10:53.586>what <00:10:53.680>kind 00:10:54.470 --> 00:10:54.480 align:start position:0% <00:10:54.470>you <00:10:54.471>can <00:10:54.473>just <00:10:54.474>decide <00:10:54.476>actually <00:10:54.477>what <00:10:54.479>kind 00:10:54.480 --> 00:10:56.350 align:start position:0% <00:10:54.480>you <00:10:54.587>can <00:10:54.695>just <00:10:54.803>decide <00:10:54.910>actually <00:10:55.018>what <00:10:55.126>kind <00:10:55.233>of <00:10:55.341>device <00:10:55.449>type, <00:10:55.556>like <00:10:55.664>what <00:10:55.772>kind <00:10:55.880>of 00:10:56.350 --> 00:10:56.360 align:start position:0% <00:10:56.350>of <00:10:56.351>device <00:10:56.353>type, <00:10:56.354>like <00:10:56.356>what <00:10:56.357>kind <00:10:56.359>of 00:10:56.360 --> 00:10:59.630 align:start position:0% <00:10:56.360>of <00:10:56.476>device <00:10:56.593>type, <00:10:56.710>like <00:10:56.826>what <00:10:56.943>kind <00:10:57.060>of <00:10:57.176>authenticator <00:10:57.293>type, <00:10:57.410>you <00:10:57.526>want <00:10:57.643>to <00:10:57.760>allow. 00:10:59.630 --> 00:10:59.640 align:start position:0% <00:10:59.630>authenticator <00:10:59.631>type, <00:10:59.633>you <00:10:59.635>want <00:10:59.637>to <00:10:59.639>allow. 00:10:59.640 --> 00:11:01.910 align:start position:0% <00:10:59.640>authenticator <00:10:59.727>type, <00:10:59.814>you <00:10:59.902>want <00:10:59.990>to <00:11:00.077>allow. <00:11:00.165>So, <00:11:00.252>but <00:11:00.340>so <00:11:00.427>far <00:11:00.515>so <00:11:00.602>good. <00:11:00.689>Uh <00:11:00.777>as <00:11:00.865>I <00:11:00.952>said, <00:11:01.040>I 00:11:01.910 --> 00:11:01.920 align:start position:0% <00:11:01.910>So, <00:11:01.910>but <00:11:01.911>so <00:11:01.912>far <00:11:01.913>so <00:11:01.914>good. <00:11:01.915>Uh <00:11:01.916>as <00:11:01.917>I <00:11:01.918>said, <00:11:01.919>I 00:11:01.920 --> 00:11:03.030 align:start position:0% <00:11:01.920>So, <00:11:01.982>but <00:11:02.044>so <00:11:02.107>far <00:11:02.169>so <00:11:02.232>good. <00:11:02.294>Uh <00:11:02.357>as <00:11:02.419>I <00:11:02.481>said, <00:11:02.544>I <00:11:02.606>will <00:11:02.669>come <00:11:02.731>to <00:11:02.794>couple <00:11:02.856>of <00:11:02.919>those 00:11:03.030 --> 00:11:03.040 align:start position:0% <00:11:03.030>will <00:11:03.031>come <00:11:03.033>to <00:11:03.035>couple <00:11:03.037>of <00:11:03.039>those 00:11:03.040 --> 00:11:05.190 align:start position:0% <00:11:03.040>will <00:11:03.167>come <00:11:03.294>to <00:11:03.421>couple <00:11:03.549>of <00:11:03.676>those <00:11:03.803>configurations <00:11:03.930>later. <00:11:04.058>This <00:11:04.185>is <00:11:04.312>all <00:11:04.439>what 00:11:05.190 --> 00:11:05.200 align:start position:0% <00:11:05.190>configurations <00:11:05.191>later. <00:11:05.193>This <00:11:05.195>is <00:11:05.197>all <00:11:05.199>what 00:11:05.200 --> 00:11:07.870 align:start position:0% <00:11:05.200>configurations <00:11:05.327>later. <00:11:05.454>This <00:11:05.581>is <00:11:05.709>all <00:11:05.836>what <00:11:05.963>it <00:11:06.090>takes <00:11:06.218>to <00:11:06.345>enable <00:11:06.472>passkey. <00:11:06.600>Another 00:11:07.870 --> 00:11:07.880 align:start position:0% <00:11:07.870>it <00:11:07.871>takes <00:11:07.873>to <00:11:07.875>enable <00:11:07.877>passkey. <00:11:07.879>Another 00:11:07.880 --> 00:11:11.430 align:start position:0% <00:11:07.880>it <00:11:07.987>takes <00:11:08.095>to <00:11:08.203>enable <00:11:08.310>passkey. <00:11:08.418>Another <00:11:08.526>great <00:11:08.633>thing <00:11:08.741>is <00:11:08.849>that <00:11:08.956>now <00:11:09.064>you <00:11:09.172>maybe <00:11:09.280>want 00:11:11.430 --> 00:11:11.440 align:start position:0% <00:11:11.430>great <00:11:11.431>thing <00:11:11.432>is <00:11:11.433>that <00:11:11.435>now <00:11:11.436>you <00:11:11.437>maybe <00:11:11.439>want 00:11:11.440 --> 00:11:14.030 align:start position:0% <00:11:11.440>great <00:11:11.547>thing <00:11:11.655>is <00:11:11.763>that <00:11:11.870>now <00:11:11.978>you <00:11:12.086>maybe <00:11:12.193>want <00:11:12.301>to <00:11:12.409>enforce <00:11:12.516>your <00:11:12.624>users <00:11:12.732>Enforcements <00:11:12.840>are 00:11:14.030 --> 00:11:14.040 align:start position:0% <00:11:14.030>to <00:11:14.031>enforce <00:11:14.033>your <00:11:14.035>users <00:11:14.037>Enforcements <00:11:14.039>are 00:11:14.040 --> 00:11:16.630 align:start position:0% <00:11:14.040>to <00:11:14.156>enforce <00:11:14.273>your <00:11:14.390>users <00:11:14.506>Enforcements <00:11:14.623>are <00:11:14.740>always <00:11:14.856>good, <00:11:14.973>especially <00:11:15.089>when <00:11:15.206>it <00:11:15.323>comes <00:11:15.439>to 00:11:16.630 --> 00:11:16.640 align:start position:0% <00:11:16.630>always <00:11:16.631>good, <00:11:16.633>especially <00:11:16.634>when <00:11:16.636>it <00:11:16.637>comes <00:11:16.639>to 00:11:16.640 --> 00:11:18.790 align:start position:0% <00:11:16.640>always <00:11:16.740>good, <00:11:16.840>especially <00:11:16.939>when <00:11:17.040>it <00:11:17.140>comes <00:11:17.240>to <00:11:17.340>uh <00:11:17.439>uh <00:11:17.540>security. <00:11:17.640>You <00:11:17.740>want <00:11:17.840>to <00:11:17.939>enforce <00:11:18.040>your 00:11:18.790 --> 00:11:18.800 align:start position:0% <00:11:18.790>uh <00:11:18.791>uh <00:11:18.792>security. <00:11:18.793>You <00:11:18.795>want <00:11:18.796>to <00:11:18.797>enforce <00:11:18.799>your 00:11:18.800 --> 00:11:21.430 align:start position:0% <00:11:18.800>uh <00:11:18.887>uh <00:11:18.974>security. <00:11:19.062>You <00:11:19.150>want <00:11:19.237>to <00:11:19.324>enforce <00:11:19.412>your <00:11:19.500>users <00:11:19.587>to <00:11:19.675>use <00:11:19.762>the <00:11:19.849>passkey. <00:11:19.937>So, <00:11:20.025>as <00:11:20.112>soon <00:11:20.199>as 00:11:21.430 --> 00:11:21.440 align:start position:0% <00:11:21.430>users <00:11:21.431>to <00:11:21.432>use <00:11:21.433>the <00:11:21.434>passkey. <00:11:21.435>So, <00:11:21.436>as <00:11:21.437>soon <00:11:21.439>as 00:11:21.440 --> 00:11:24.230 align:start position:0% <00:11:21.440>users <00:11:21.527>to <00:11:21.615>use <00:11:21.702>the <00:11:21.790>passkey. <00:11:21.877>So, <00:11:21.965>as <00:11:22.052>soon <00:11:22.140>as <00:11:22.227>they <00:11:22.315>log <00:11:22.402>in, <00:11:22.490>they <00:11:22.577>should <00:11:22.665>be <00:11:22.752>asked <00:11:22.840>and 00:11:24.230 --> 00:11:24.240 align:start position:0% <00:11:24.230>they <00:11:24.231>log <00:11:24.232>in, <00:11:24.233>they <00:11:24.235>should <00:11:24.236>be <00:11:24.237>asked <00:11:24.239>and 00:11:24.240 --> 00:11:27.990 align:start position:0% <00:11:24.240>they <00:11:24.340>log <00:11:24.440>in, <00:11:24.540>they <00:11:24.640>should <00:11:24.740>be <00:11:24.840>asked <00:11:24.940>and <00:11:25.040>told <00:11:25.140>also <00:11:25.240>register <00:11:25.340>a <00:11:25.440>passkey. <00:11:25.540>So, <00:11:25.640>what 00:11:27.990 --> 00:11:28.000 align:start position:0% <00:11:27.990>told <00:11:27.991>also <00:11:27.993>register <00:11:27.994>a <00:11:27.996>passkey. <00:11:27.997>So, <00:11:27.999>what 00:11:28.000 --> 00:11:30.470 align:start position:0% <00:11:28.000>told <00:11:28.116>also <00:11:28.233>register <00:11:28.350>a <00:11:28.466>passkey. <00:11:28.583>So, <00:11:28.700>what <00:11:28.816>you <00:11:28.933>can <00:11:29.050>have <00:11:29.166>are <00:11:29.283>so-called <00:11:29.400>required 00:11:30.470 --> 00:11:30.480 align:start position:0% <00:11:30.470>you <00:11:30.471>can <00:11:30.473>have <00:11:30.475>are <00:11:30.477>so-called <00:11:30.479>required 00:11:30.480 --> 00:11:33.070 align:start position:0% <00:11:30.480>you <00:11:30.607>can <00:11:30.734>have <00:11:30.861>are <00:11:30.989>so-called <00:11:31.116>required <00:11:31.243>actions, <00:11:31.370>and <00:11:31.498>there <00:11:31.625>you <00:11:31.752>can <00:11:31.880>actually 00:11:33.070 --> 00:11:33.080 align:start position:0% <00:11:33.070>actions, <00:11:33.071>and <00:11:33.073>there <00:11:33.075>you <00:11:33.077>can <00:11:33.079>actually 00:11:33.080 --> 00:11:38.350 align:start position:0% <00:11:33.080>actions, <00:11:33.187>and <00:11:33.295>there <00:11:33.403>you <00:11:33.510>can <00:11:33.618>actually <00:11:33.726>enable <00:11:33.833>as <00:11:33.941>an <00:11:34.049>as <00:11:34.156>a <00:11:34.264>default <00:11:34.372>action <00:11:34.480>this 00:11:38.350 --> 00:11:38.360 align:start position:0% <00:11:38.350>enable <00:11:38.351>as <00:11:38.352>an <00:11:38.353>as <00:11:38.355>a <00:11:38.356>default <00:11:38.357>action <00:11:38.359>this 00:11:38.360 --> 00:11:40.630 align:start position:0% <00:11:38.360>enable <00:11:38.515>as <00:11:38.671>an <00:11:38.826>as <00:11:38.982>a <00:11:39.137>default <00:11:39.293>action <00:11:39.448>this <00:11:39.604>register <00:11:39.760>passwordless. 00:11:40.630 --> 00:11:40.640 align:start position:0% <00:11:40.630>register <00:11:40.639>passwordless. 00:11:40.640 --> 00:11:43.390 align:start position:0% <00:11:40.640>register <00:11:40.795>passwordless. <00:11:40.951>So, <00:11:41.106>what <00:11:41.262>happens <00:11:41.417>then <00:11:41.573>is <00:11:41.728>when <00:11:41.884>you <00:11:42.040>want 00:11:43.390 --> 00:11:43.400 align:start position:0% <00:11:43.390>So, <00:11:43.391>what <00:11:43.392>happens <00:11:43.393>then <00:11:43.395>is <00:11:43.396>when <00:11:43.397>you <00:11:43.399>want 00:11:43.400 --> 00:11:47.830 align:start position:0% <00:11:43.400>So, <00:11:43.482>what <00:11:43.564>happens <00:11:43.647>then <00:11:43.729>is <00:11:43.811>when <00:11:43.894>you <00:11:43.976>want <00:11:44.058>to <00:11:44.141>log <00:11:44.223>in, <00:11:44.305>and <00:11:44.388>now <00:11:44.470>I <00:11:44.552>will <00:11:44.635>log <00:11:44.717>in <00:11:44.800>myself, 00:11:47.830 --> 00:11:47.840 align:start position:0% <00:11:47.830>to <00:11:47.831>log <00:11:47.832>in, <00:11:47.833>and <00:11:47.834>now <00:11:47.835>I <00:11:47.836>will <00:11:47.837>log <00:11:47.838>in <00:11:47.839>myself, 00:11:47.840 --> 00:11:49.750 align:start position:0% <00:11:47.840>to <00:11:47.940>log <00:11:48.040>in, <00:11:48.140>and <00:11:48.240>now <00:11:48.340>I <00:11:48.440>will <00:11:48.540>log <00:11:48.640>in <00:11:48.740>myself, <00:11:48.840>I <00:11:48.940>get <00:11:49.040>immediately <00:11:49.140>asked, <00:11:49.240>"Please 00:11:49.750 --> 00:11:49.760 align:start position:0% <00:11:49.750>I <00:11:49.752>get <00:11:49.754>immediately <00:11:49.756>asked, <00:11:49.759>"Please 00:11:49.760 --> 00:11:51.790 align:start position:0% <00:11:49.760>I <00:11:49.900>get <00:11:50.040>immediately <00:11:50.180>asked, <00:11:50.319>"Please <00:11:50.460>register <00:11:50.600>a <00:11:50.740>passkey." <00:11:50.880>And <00:11:51.020>this <00:11:51.160>is 00:11:51.790 --> 00:11:51.800 align:start position:0% <00:11:51.790>register <00:11:51.791>a <00:11:51.793>passkey." <00:11:51.795>And <00:11:51.797>this <00:11:51.799>is 00:11:51.800 --> 00:11:54.350 align:start position:0% <00:11:51.800>register <00:11:51.927>a <00:11:52.054>passkey." <00:11:52.181>And <00:11:52.309>this <00:11:52.436>is <00:11:52.563>basically <00:11:52.690>the <00:11:52.818>common <00:11:52.945>drill <00:11:53.072>you <00:11:53.199>maybe 00:11:54.350 --> 00:11:54.360 align:start position:0% <00:11:54.350>basically <00:11:54.351>the <00:11:54.353>common <00:11:54.355>drill <00:11:54.357>you <00:11:54.359>maybe 00:11:54.360 --> 00:11:55.750 align:start position:0% <00:11:54.360>basically <00:11:54.485>the <00:11:54.610>common <00:11:54.735>drill <00:11:54.860>you <00:11:54.985>maybe <00:11:55.110>already <00:11:55.235>know <00:11:55.360>since <00:11:55.485>you're <00:11:55.611>already 00:11:55.750 --> 00:11:55.760 align:start position:0% <00:11:55.750>already <00:11:55.752>know <00:11:55.754>since <00:11:55.756>you're <00:11:55.759>already 00:11:55.760 --> 00:11:58.110 align:start position:0% <00:11:55.760>already <00:11:55.900>know <00:11:56.040>since <00:11:56.180>you're <00:11:56.319>already <00:11:56.460>familiar <00:11:56.600>with <00:11:56.740>passkeys. <00:11:56.880>I <00:11:57.020>will <00:11:57.160>register 00:11:58.110 --> 00:11:58.120 align:start position:0% <00:11:58.110>familiar <00:11:58.111>with <00:11:58.113>passkeys. <00:11:58.115>I <00:11:58.117>will <00:11:58.119>register 00:11:58.120 --> 00:12:00.790 align:start position:0% <00:11:58.120>familiar <00:11:58.260>with <00:11:58.400>passkeys. <00:11:58.540>I <00:11:58.680>will <00:11:58.820>register <00:11:58.960>it. <00:11:59.100>My <00:11:59.240>iCloud <00:11:59.380>keychain <00:11:59.520>authenticator 00:12:00.790 --> 00:12:00.800 align:start position:0% <00:12:00.790>it. <00:12:00.792>My <00:12:00.794>iCloud <00:12:00.796>keychain <00:12:00.799>authenticator 00:12:00.800 --> 00:12:03.430 align:start position:0% <00:12:00.800>it. <00:12:00.907>My <00:12:01.015>iCloud <00:12:01.123>keychain <00:12:01.230>authenticator <00:12:01.338>will <00:12:01.446>be <00:12:01.553>asked. <00:12:01.661>So, <00:12:01.769>I <00:12:01.876>got <00:12:01.984>asked <00:12:02.092>for <00:12:02.199>user 00:12:03.430 --> 00:12:03.440 align:start position:0% <00:12:03.430>will <00:12:03.431>be <00:12:03.432>asked. <00:12:03.433>So, <00:12:03.434>I <00:12:03.435>got <00:12:03.436>asked <00:12:03.437>for <00:12:03.439>user 00:12:03.440 --> 00:12:05.230 align:start position:0% <00:12:03.440>will <00:12:03.556>be <00:12:03.673>asked. <00:12:03.790>So, <00:12:03.906>I <00:12:04.023>got <00:12:04.140>asked <00:12:04.256>for <00:12:04.373>user <00:12:04.490>verification <00:12:04.606>again <00:12:04.723>towards <00:12:04.840>my 00:12:05.230 --> 00:12:05.240 align:start position:0% <00:12:05.230>verification <00:12:05.233>again <00:12:05.236>towards <00:12:05.239>my 00:12:05.240 --> 00:12:06.750 align:start position:0% <00:12:05.240>verification <00:12:05.579>again <00:12:05.919>towards <00:12:06.259>my <00:12:06.599>authenticator, 00:12:06.750 --> 00:12:06.760 align:start position:0% authenticator, 00:12:06.760 --> 00:12:08.310 align:start position:0% <00:12:06.760>authenticator, <00:12:08.155>and 00:12:08.310 --> 00:12:08.320 align:start position:0% and 00:12:08.320 --> 00:12:10.870 align:start position:0% <00:12:08.320>and <00:12:08.553>my <00:12:08.786>passkey <00:12:09.020>is <00:12:09.253>basically <00:12:09.486>registered. <00:12:09.720>I 00:12:10.870 --> 00:12:10.880 align:start position:0% <00:12:10.870>my <00:12:10.871>passkey <00:12:10.873>is <00:12:10.875>basically <00:12:10.877>registered. <00:12:10.879>I 00:12:10.880 --> 00:12:12.430 align:start position:0% <00:12:10.880>my <00:12:11.019>passkey <00:12:11.159>is <00:12:11.298>basically <00:12:11.438>registered. <00:12:11.577>I <00:12:11.717>can <00:12:11.856>give <00:12:11.996>it <00:12:12.135>a <00:12:12.275>name, 00:12:12.430 --> 00:12:12.440 align:start position:0% <00:12:12.430>can <00:12:12.432>give <00:12:12.434>it <00:12:12.436>a <00:12:12.439>name, 00:12:12.440 --> 00:12:15.630 align:start position:0% <00:12:12.440>can <00:12:12.533>give <00:12:12.626>it <00:12:12.720>a <00:12:12.813>name, <00:12:12.906>and <00:12:13.000>that's <00:12:13.093>it. <00:12:13.186>So, <00:12:13.280>if <00:12:13.373>I <00:12:13.466>log <00:12:13.560>out <00:12:13.653>if <00:12:13.746>I <00:12:13.840>log 00:12:15.630 --> 00:12:15.640 align:start position:0% <00:12:15.630>and <00:12:15.630>that's <00:12:15.631>it. <00:12:15.632>So, <00:12:15.633>if <00:12:15.634>I <00:12:15.635>log <00:12:15.636>out <00:12:15.637>if <00:12:15.638>I <00:12:15.639>log 00:12:15.640 --> 00:12:18.510 align:start position:0% <00:12:15.640>and <00:12:15.717>that's <00:12:15.795>it. <00:12:15.873>So, <00:12:15.951>if <00:12:16.028>I <00:12:16.106>log <00:12:16.184>out <00:12:16.262>if <00:12:16.340>I <00:12:16.417>log <00:12:16.495>myself <00:12:16.573>out, <00:12:16.651>I <00:12:16.728>log <00:12:16.806>myself <00:12:16.884>in <00:12:16.962>again, <00:12:17.040>the 00:12:18.510 --> 00:12:18.520 align:start position:0% <00:12:18.510>myself <00:12:18.511>out, <00:12:18.512>I <00:12:18.513>log <00:12:18.515>myself <00:12:18.516>in <00:12:18.517>again, <00:12:18.519>the 00:12:18.520 --> 00:12:21.470 align:start position:0% <00:12:18.520>myself <00:12:18.620>out, <00:12:18.720>I <00:12:18.819>log <00:12:18.920>myself <00:12:19.020>in <00:12:19.120>again, <00:12:19.220>the <00:12:19.319>really, <00:12:19.420>really <00:12:19.520>cool <00:12:19.620>thing <00:12:19.720>here <00:12:19.819>is <00:12:19.920>that 00:12:21.470 --> 00:12:21.480 align:start position:0% <00:12:21.470>really, <00:12:21.471>really <00:12:21.473>cool <00:12:21.474>thing <00:12:21.476>here <00:12:21.477>is <00:12:21.479>that 00:12:21.480 --> 00:12:22.830 align:start position:0% <00:12:21.480>really, <00:12:21.601>really <00:12:21.723>cool <00:12:21.844>thing <00:12:21.966>here <00:12:22.087>is <00:12:22.209>that <00:12:22.330>you <00:12:22.452>don't <00:12:22.573>have <00:12:22.695>to 00:12:22.830 --> 00:12:22.840 align:start position:0% <00:12:22.830>you <00:12:22.833>don't <00:12:22.836>have <00:12:22.839>to 00:12:22.840 --> 00:12:24.830 align:start position:0% <00:12:22.840>you <00:12:22.995>don't <00:12:23.151>have <00:12:23.306>to <00:12:23.462>enforce <00:12:23.617>it <00:12:23.773>immediately. <00:12:23.928>So, <00:12:24.084>it's <00:12:24.240>not 00:12:24.830 --> 00:12:24.840 align:start position:0% <00:12:24.830>enforce <00:12:24.831>it <00:12:24.833>immediately. <00:12:24.835>So, <00:12:24.837>it's <00:12:24.839>not 00:12:24.840 --> 00:12:27.670 align:start position:0% <00:12:24.840>enforce <00:12:24.947>it <00:12:25.055>immediately. <00:12:25.163>So, <00:12:25.270>it's <00:12:25.378>not <00:12:25.486>like <00:12:25.593>you <00:12:25.701>you <00:12:25.809>need <00:12:25.916>the <00:12:26.024>users <00:12:26.132>need <00:12:26.240>to 00:12:27.670 --> 00:12:27.680 align:start position:0% <00:12:27.670>like <00:12:27.671>you <00:12:27.672>you <00:12:27.673>need <00:12:27.675>the <00:12:27.676>users <00:12:27.677>need <00:12:27.679>to 00:12:27.680 --> 00:12:29.630 align:start position:0% <00:12:27.680>like <00:12:27.787>you <00:12:27.895>you <00:12:28.003>need <00:12:28.110>the <00:12:28.218>users <00:12:28.326>need <00:12:28.433>to <00:12:28.541>immediately <00:12:28.649>switch <00:12:28.756>to <00:12:28.864>passkeys. <00:12:28.972>You <00:12:29.079>can 00:12:29.630 --> 00:12:29.640 align:start position:0% <00:12:29.630>immediately <00:12:29.631>switch <00:12:29.633>to <00:12:29.635>passkeys. <00:12:29.637>You <00:12:29.639>can 00:12:29.640 --> 00:12:31.990 align:start position:0% <00:12:29.640>immediately <00:12:29.747>switch <00:12:29.855>to <00:12:29.963>passkeys. <00:12:30.070>You <00:12:30.178>can <00:12:30.286>have <00:12:30.393>a <00:12:30.501>transition <00:12:30.609>phase <00:12:30.716>in <00:12:30.824>a <00:12:30.932>sense <00:12:31.040>that 00:12:31.990 --> 00:12:32.000 align:start position:0% <00:12:31.990>have <00:12:31.991>a <00:12:31.992>transition <00:12:31.993>phase <00:12:31.995>in <00:12:31.996>a <00:12:31.997>sense <00:12:31.999>that 00:12:32.000 --> 00:12:33.750 align:start position:0% <00:12:32.000>have <00:12:32.093>a <00:12:32.186>transition <00:12:32.280>phase <00:12:32.373>in <00:12:32.466>a <00:12:32.560>sense <00:12:32.653>that <00:12:32.746>the <00:12:32.840>users <00:12:32.933>can <00:12:33.026>still <00:12:33.120>log <00:12:33.213>in <00:12:33.306>with <00:12:33.400>a 00:12:33.750 --> 00:12:33.760 align:start position:0% <00:12:33.750>the <00:12:33.751>users <00:12:33.752>can <00:12:33.753>still <00:12:33.755>log <00:12:33.756>in <00:12:33.757>with <00:12:33.759>a 00:12:33.760 --> 00:12:35.030 align:start position:0% <00:12:33.760>the <00:12:33.902>users <00:12:34.045>can <00:12:34.188>still <00:12:34.331>log <00:12:34.474>in <00:12:34.617>with <00:12:34.760>a <00:12:34.903>password, 00:12:35.030 --> 00:12:35.040 align:start position:0% password, 00:12:35.040 --> 00:12:37.190 align:start position:0% <00:12:35.040>password, <00:12:35.214>but <00:12:35.390>you <00:12:35.564>also <00:12:35.740>get <00:12:35.915>some <00:12:36.089>kind <00:12:36.265>of <00:12:36.439>auto 00:12:37.190 --> 00:12:37.200 align:start position:0% <00:12:37.190>but <00:12:37.191>you <00:12:37.192>also <00:12:37.193>get <00:12:37.195>some <00:12:37.196>kind <00:12:37.197>of <00:12:37.199>auto 00:12:37.200 --> 00:12:39.790 align:start position:0% <00:12:37.200>but <00:12:37.307>you <00:12:37.415>also <00:12:37.523>get <00:12:37.630>some <00:12:37.738>kind <00:12:37.846>of <00:12:37.953>auto <00:12:38.061>completion <00:12:38.169>for <00:12:38.276>passkeys. <00:12:38.384>So, <00:12:38.492>I <00:12:38.600>still 00:12:39.790 --> 00:12:39.800 align:start position:0% <00:12:39.790>completion <00:12:39.791>for <00:12:39.793>passkeys. <00:12:39.795>So, <00:12:39.797>I <00:12:39.799>still 00:12:39.800 --> 00:12:41.110 align:start position:0% <00:12:39.800>completion <00:12:39.898>for <00:12:39.996>passkeys. <00:12:40.094>So, <00:12:40.193>I <00:12:40.291>still <00:12:40.389>could <00:12:40.487>log <00:12:40.586>in <00:12:40.684>now <00:12:40.782>with <00:12:40.880>username <00:12:40.979>and 00:12:41.110 --> 00:12:41.120 align:start position:0% <00:12:41.110>could <00:12:41.111>log <00:12:41.113>in <00:12:41.114>now <00:12:41.116>with <00:12:41.117>username <00:12:41.119>and 00:12:41.120 --> 00:12:44.670 align:start position:0% <00:12:41.120>could <00:12:41.227>log <00:12:41.335>in <00:12:41.443>now <00:12:41.550>with <00:12:41.658>username <00:12:41.766>and <00:12:41.873>password, <00:12:41.981>but <00:12:42.089>I <00:12:42.196>can <00:12:42.304>just <00:12:42.412>since <00:12:42.520>passkeys 00:12:44.670 --> 00:12:44.680 align:start position:0% <00:12:44.670>password, <00:12:44.671>but <00:12:44.673>I <00:12:44.674>can <00:12:44.675>just <00:12:44.677>since <00:12:44.679>passkeys 00:12:44.680 --> 00:12:46.270 align:start position:0% <00:12:44.680>password, <00:12:44.854>but <00:12:45.030>I <00:12:45.204>can <00:12:45.380>just <00:12:45.555>since <00:12:45.729>passkeys <00:12:45.905>are <00:12:46.079>discoverable, 00:12:46.270 --> 00:12:46.280 align:start position:0% <00:12:46.270>are <00:12:46.279>discoverable, 00:12:46.280 --> 00:12:49.030 align:start position:0% <00:12:46.280>are <00:12:46.420>discoverable, <00:12:46.560>I <00:12:46.699>can <00:12:46.839>just <00:12:46.980>log <00:12:47.120>in <00:12:47.260>myself <00:12:47.400>with <00:12:47.540>a <00:12:47.680>passkey. 00:12:49.030 --> 00:12:49.040 align:start position:0% <00:12:49.030>I <00:12:49.031>can <00:12:49.032>just <00:12:49.033>log <00:12:49.034>in <00:12:49.035>myself <00:12:49.036>with <00:12:49.037>a <00:12:49.039>passkey. 00:12:49.040 --> 00:12:50.950 align:start position:0% <00:12:49.040>I <00:12:49.156>can <00:12:49.273>just <00:12:49.390>log <00:12:49.506>in <00:12:49.623>myself <00:12:49.740>with <00:12:49.856>a <00:12:49.973>passkey. <00:12:50.089>Again, <00:12:50.206>user <00:12:50.323>verification. <00:12:50.439>My 00:12:50.950 --> 00:12:50.960 align:start position:0% <00:12:50.950>Again, <00:12:50.953>user <00:12:50.956>verification. <00:12:50.959>My 00:12:50.960 --> 00:12:53.310 align:start position:0% <00:12:50.960>Again, <00:12:51.115>user <00:12:51.271>verification. <00:12:51.426>My <00:12:51.582>authenticator <00:12:51.737>tells <00:12:51.893>me <00:12:52.048>to <00:12:52.204>verify <00:12:52.360>again 00:12:53.310 --> 00:12:53.320 align:start position:0% <00:12:53.310>authenticator <00:12:53.311>tells <00:12:53.313>me <00:12:53.315>to <00:12:53.317>verify <00:12:53.319>again 00:12:53.320 --> 00:12:56.670 align:start position:0% <00:12:53.320>authenticator <00:12:53.447>tells <00:12:53.574>me <00:12:53.701>to <00:12:53.829>verify <00:12:53.956>again <00:12:54.083>towards <00:12:54.210>it, <00:12:54.338>and <00:12:54.465>I'm <00:12:54.592>logged <00:12:54.720>in. 00:12:56.670 --> 00:12:56.680 align:start position:0% <00:12:56.670>towards <00:12:56.671>it, <00:12:56.673>and <00:12:56.675>I'm <00:12:56.677>logged <00:12:56.679>in. 00:12:56.680 --> 00:12:58.990 align:start position:0% <00:12:56.680>towards <00:12:56.807>it, <00:12:56.934>and <00:12:57.061>I'm <00:12:57.189>logged <00:12:57.316>in. <00:12:57.443>Another <00:12:57.570>really <00:12:57.698>important <00:12:57.825>thing <00:12:57.952>is <00:12:58.079>that 00:12:58.990 --> 00:12:59.000 align:start position:0% <00:12:58.990>Another <00:12:58.991>really <00:12:58.993>important <00:12:58.995>thing <00:12:58.997>is <00:12:58.999>that 00:12:59.000 --> 00:13:01.829 align:start position:0% <00:12:59.000>Another <00:12:59.100>really <00:12:59.200>important <00:12:59.300>thing <00:12:59.400>is <00:12:59.500>that <00:12:59.600>Keycloak <00:12:59.700>also <00:12:59.800>gives <00:12:59.900>us <00:13:00.000>out <00:13:00.100>of <00:13:00.200>the <00:13:00.300>box <00:13:00.400>is 00:13:01.829 --> 00:13:01.839 align:start position:0% <00:13:01.829>Keycloak <00:13:01.830>also <00:13:01.831>gives <00:13:01.832>us <00:13:01.833>out <00:13:01.834>of <00:13:01.835>the <00:13:01.836>box <00:13:01.838>is 00:13:01.839 --> 00:13:03.829 align:start position:0% <00:13:01.839>Keycloak <00:13:01.926>also <00:13:02.014>gives <00:13:02.101>us <00:13:02.189>out <00:13:02.276>of <00:13:02.364>the <00:13:02.451>box <00:13:02.539>is <00:13:02.626>to <00:13:02.714>be <00:13:02.801>able <00:13:02.889>to <00:13:02.976>manage <00:13:03.064>those <00:13:03.151>passkeys <00:13:03.239>for 00:13:03.829 --> 00:13:03.839 align:start position:0% <00:13:03.829>to <00:13:03.830>be <00:13:03.831>able <00:13:03.832>to <00:13:03.834>manage <00:13:03.835>those <00:13:03.836>passkeys <00:13:03.838>for 00:13:03.839 --> 00:13:06.510 align:start position:0% <00:13:03.839>to <00:13:03.932>be <00:13:04.025>able <00:13:04.119>to <00:13:04.212>manage <00:13:04.305>those <00:13:04.399>passkeys <00:13:04.492>for <00:13:04.585>sure. <00:13:04.679>So, <00:13:04.772>I <00:13:04.865>just <00:13:04.959>got <00:13:05.052>forwarded <00:13:05.145>to <00:13:05.239>an 00:13:06.510 --> 00:13:06.520 align:start position:0% <00:13:06.510>sure. <00:13:06.511>So, <00:13:06.512>I <00:13:06.513>just <00:13:06.515>got <00:13:06.516>forwarded <00:13:06.517>to <00:13:06.519>an 00:13:06.520 --> 00:13:09.590 align:start position:0% <00:13:06.520>sure. <00:13:06.620>So, <00:13:06.720>I <00:13:06.819>just <00:13:06.920>got <00:13:07.020>forwarded <00:13:07.120>to <00:13:07.220>an <00:13:07.319>account <00:13:07.420>page <00:13:07.520>basically, <00:13:07.620>and <00:13:07.720>what <00:13:07.819>I <00:13:07.920>have 00:13:09.590 --> 00:13:09.600 align:start position:0% <00:13:09.590>account <00:13:09.591>page <00:13:09.593>basically, <00:13:09.594>and <00:13:09.596>what <00:13:09.597>I <00:13:09.599>have 00:13:09.600 --> 00:13:12.190 align:start position:0% <00:13:09.600>account <00:13:09.707>page <00:13:09.815>basically, <00:13:09.923>and <00:13:10.030>what <00:13:10.138>I <00:13:10.246>have <00:13:10.353>here, <00:13:10.461>of <00:13:10.569>course, <00:13:10.676>the <00:13:10.784>possibility <00:13:10.892>to <00:13:11.000>add 00:13:12.190 --> 00:13:12.200 align:start position:0% <00:13:12.190>here, <00:13:12.191>of <00:13:12.193>course, <00:13:12.194>the <00:13:12.196>possibility <00:13:12.197>to <00:13:12.199>add 00:13:12.200 --> 00:13:15.390 align:start position:0% <00:13:12.200>here, <00:13:12.300>of <00:13:12.400>course, <00:13:12.500>the <00:13:12.600>possibility <00:13:12.700>to <00:13:12.800>add <00:13:12.900>another <00:13:13.000>passkey, <00:13:13.100>to <00:13:13.200>delete <00:13:13.300>it, <00:13:13.400>or <00:13:13.500>to <00:13:13.600>to 00:13:15.390 --> 00:13:15.400 align:start position:0% <00:13:15.390>another <00:13:15.391>passkey, <00:13:15.392>to <00:13:15.393>delete <00:13:15.395>it, <00:13:15.396>or <00:13:15.397>to <00:13:15.399>to 00:13:15.400 --> 00:13:17.750 align:start position:0% <00:13:15.400>another <00:13:15.516>passkey, <00:13:15.633>to <00:13:15.750>delete <00:13:15.866>it, <00:13:15.983>or <00:13:16.100>to <00:13:16.216>to <00:13:16.333>somehow, <00:13:16.449>yeah, <00:13:16.566>basically <00:13:16.683>delete <00:13:16.800>delete 00:13:17.750 --> 00:13:17.760 align:start position:0% <00:13:17.750>somehow, <00:13:17.752>yeah, <00:13:17.754>basically <00:13:17.756>delete <00:13:17.759>delete 00:13:17.760 --> 00:13:20.350 align:start position:0% <00:13:17.760>somehow, <00:13:17.887>yeah, <00:13:18.014>basically <00:13:18.141>delete <00:13:18.269>delete <00:13:18.396>it <00:13:18.523>or <00:13:18.650>add <00:13:18.778>another <00:13:18.905>passkey. <00:13:19.032>Um <00:13:19.160>one 00:13:20.350 --> 00:13:20.360 align:start position:0% <00:13:20.350>it <00:13:20.351>or <00:13:20.353>add <00:13:20.354>another <00:13:20.356>passkey. <00:13:20.357>Um <00:13:20.359>one 00:13:20.360 --> 00:13:22.910 align:start position:0% <00:13:20.360>it <00:13:20.460>or <00:13:20.560>add <00:13:20.660>another <00:13:20.760>passkey. <00:13:20.860>Um <00:13:20.960>one <00:13:21.060>important <00:13:21.160>thing <00:13:21.260>as <00:13:21.360>a <00:13:21.460>side <00:13:21.560>note, <00:13:21.660>if <00:13:21.760>you 00:13:22.910 --> 00:13:22.920 align:start position:0% <00:13:22.910>important <00:13:22.911>thing <00:13:22.912>as <00:13:22.913>a <00:13:22.915>side <00:13:22.916>note, <00:13:22.917>if <00:13:22.919>you 00:13:22.920 --> 00:13:25.630 align:start position:0% <00:13:22.920>important <00:13:23.020>thing <00:13:23.120>as <00:13:23.219>a <00:13:23.319>side <00:13:23.420>note, <00:13:23.520>if <00:13:23.620>you <00:13:23.719>delete <00:13:23.819>a <00:13:23.920>passkey <00:13:24.020>over <00:13:24.120>here, <00:13:24.219>that <00:13:24.319>doesn't 00:13:25.630 --> 00:13:25.640 align:start position:0% <00:13:25.630>delete <00:13:25.631>a <00:13:25.633>passkey <00:13:25.634>over <00:13:25.636>here, <00:13:25.637>that <00:13:25.639>doesn't 00:13:25.640 --> 00:13:27.150 align:start position:0% <00:13:25.640>delete <00:13:25.763>a <00:13:25.887>passkey <00:13:26.010>over <00:13:26.134>here, <00:13:26.257>that <00:13:26.381>doesn't <00:13:26.504>affect <00:13:26.628>the <00:13:26.751>passkey <00:13:26.875>on <00:13:26.999>your 00:13:27.150 --> 00:13:27.160 align:start position:0% <00:13:27.150>affect <00:13:27.152>the <00:13:27.154>passkey <00:13:27.156>on <00:13:27.159>your 00:13:27.160 --> 00:13:29.870 align:start position:0% <00:13:27.160>affect <00:13:27.315>the <00:13:27.471>passkey <00:13:27.626>on <00:13:27.782>your <00:13:27.937>authenticator. <00:13:28.093>It's <00:13:28.248>a <00:13:28.404>separated <00:13:28.560>step. 00:13:29.870 --> 00:13:29.880 align:start position:0% <00:13:29.870>authenticator. <00:13:29.872>It's <00:13:29.874>a <00:13:29.876>separated <00:13:29.879>step. 00:13:29.880 --> 00:13:31.630 align:start position:0% <00:13:29.880>authenticator. <00:13:29.996>It's <00:13:30.113>a <00:13:30.230>separated <00:13:30.346>step. <00:13:30.463>Since <00:13:30.580>of <00:13:30.696>course <00:13:30.813>your <00:13:30.930>passkey <00:13:31.046>can <00:13:31.163>be <00:13:31.280>on 00:13:31.630 --> 00:13:31.640 align:start position:0% <00:13:31.630>Since <00:13:31.631>of <00:13:31.632>course <00:13:31.633>your <00:13:31.635>passkey <00:13:31.636>can <00:13:31.637>be <00:13:31.639>on 00:13:31.640 --> 00:13:34.230 align:start position:0% <00:13:31.640>Since <00:13:31.740>of <00:13:31.840>course <00:13:31.939>your <00:13:32.040>passkey <00:13:32.140>can <00:13:32.240>be <00:13:32.340>on <00:13:32.439>your <00:13:32.540>YubiKey. <00:13:32.640>So <00:13:32.740>so <00:13:32.840>if <00:13:32.939>your <00:13:33.040>YubiKey 00:13:34.230 --> 00:13:34.240 align:start position:0% <00:13:34.230>your <00:13:34.231>YubiKey. <00:13:34.233>So <00:13:34.234>so <00:13:34.236>if <00:13:34.237>your <00:13:34.239>YubiKey 00:13:34.240 --> 00:13:36.190 align:start position:0% <00:13:34.240>your <00:13:34.356>YubiKey. <00:13:34.473>So <00:13:34.590>so <00:13:34.706>if <00:13:34.823>your <00:13:34.940>YubiKey <00:13:35.056>isn't <00:13:35.173>plugged <00:13:35.290>in, <00:13:35.406>how <00:13:35.523>should <00:13:35.640>Keycloak 00:13:36.190 --> 00:13:36.200 align:start position:0% <00:13:36.190>isn't <00:13:36.191>plugged <00:13:36.193>in, <00:13:36.195>how <00:13:36.197>should <00:13:36.199>Keycloak 00:13:36.200 --> 00:13:38.230 align:start position:0% <00:13:36.200>isn't <00:13:36.316>plugged <00:13:36.433>in, <00:13:36.550>how <00:13:36.666>should <00:13:36.783>Keycloak <00:13:36.900>now <00:13:37.016>delete <00:13:37.133>the <00:13:37.250>passkey <00:13:37.366>that <00:13:37.483>you <00:13:37.600>have 00:13:38.230 --> 00:13:38.240 align:start position:0% <00:13:38.230>now <00:13:38.231>delete <00:13:38.233>the <00:13:38.234>passkey <00:13:38.236>that <00:13:38.237>you <00:13:38.239>have 00:13:38.240 --> 00:13:40.270 align:start position:0% <00:13:38.240>now <00:13:38.367>delete <00:13:38.494>the <00:13:38.621>passkey <00:13:38.749>that <00:13:38.876>you <00:13:39.003>have <00:13:39.130>been <00:13:39.258>created <00:13:39.385>on <00:13:39.512>the <00:13:39.640>YubiKey? 00:13:40.270 --> 00:13:40.280 align:start position:0% <00:13:40.270>been <00:13:40.272>created <00:13:40.274>on <00:13:40.276>the <00:13:40.279>YubiKey? 00:13:40.280 --> 00:13:43.070 align:start position:0% <00:13:40.280>been <00:13:40.387>created <00:13:40.495>on <00:13:40.603>the <00:13:40.710>YubiKey? <00:13:40.818>So <00:13:40.926>um <00:13:41.033>just <00:13:41.141>keep <00:13:41.249>in <00:13:41.356>mind <00:13:41.464>that <00:13:41.572>of <00:13:41.680>course 00:13:43.070 --> 00:13:43.080 align:start position:0% <00:13:43.070>So <00:13:43.071>um <00:13:43.072>just <00:13:43.073>keep <00:13:43.074>in <00:13:43.075>mind <00:13:43.076>that <00:13:43.077>of <00:13:43.079>course 00:13:43.080 --> 00:13:45.190 align:start position:0% <00:13:43.080>So <00:13:43.180>um <00:13:43.280>just <00:13:43.380>keep <00:13:43.480>in <00:13:43.580>mind <00:13:43.680>that <00:13:43.780>of <00:13:43.880>course <00:13:43.980>you <00:13:44.080>can <00:13:44.180>delete <00:13:44.280>your <00:13:44.380>passkeys <00:13:44.480>binding 00:13:45.190 --> 00:13:45.200 align:start position:0% <00:13:45.190>you <00:13:45.191>can <00:13:45.193>delete <00:13:45.195>your <00:13:45.197>passkeys <00:13:45.199>binding 00:13:45.200 --> 00:13:46.990 align:start position:0% <00:13:45.200>you <00:13:45.340>can <00:13:45.480>delete <00:13:45.620>your <00:13:45.760>passkeys <00:13:45.900>binding <00:13:46.040>towards <00:13:46.180>Keycloak <00:13:46.320>or <00:13:46.460>towards <00:13:46.600>your 00:13:46.990 --> 00:13:47.000 align:start position:0% <00:13:46.990>towards <00:13:46.992>Keycloak <00:13:46.994>or <00:13:46.996>towards <00:13:46.999>your 00:13:47.000 --> 00:13:48.310 align:start position:0% <00:13:47.000>towards <00:13:47.117>Keycloak <00:13:47.235>or <00:13:47.353>towards <00:13:47.471>your <00:13:47.589>identity <00:13:47.707>provider, <00:13:47.825>but <00:13:47.943>you <00:13:48.061>need <00:13:48.179>to 00:13:48.310 --> 00:13:48.320 align:start position:0% <00:13:48.310>identity <00:13:48.311>provider, <00:13:48.313>but <00:13:48.315>you <00:13:48.317>need <00:13:48.319>to 00:13:48.320 --> 00:13:50.870 align:start position:0% <00:13:48.320>identity <00:13:48.447>provider, <00:13:48.574>but <00:13:48.701>you <00:13:48.829>need <00:13:48.956>to <00:13:49.083>delete <00:13:49.210>it <00:13:49.338>secondly <00:13:49.465>also <00:13:49.592>on <00:13:49.720>your 00:13:50.870 --> 00:13:50.880 align:start position:0% <00:13:50.870>delete <00:13:50.871>it <00:13:50.873>secondly <00:13:50.875>also <00:13:50.877>on <00:13:50.879>your 00:13:50.880 --> 00:13:52.910 align:start position:0% <00:13:50.880>delete <00:13:51.055>it <00:13:51.230>secondly <00:13:51.405>also <00:13:51.580>on <00:13:51.755>your <00:13:51.930>authenticator <00:13:52.105>for <00:13:52.280>sure. 00:13:52.910 --> 00:13:52.920 align:start position:0% <00:13:52.910>authenticator <00:13:52.914>for <00:13:52.919>sure. 00:13:52.920 --> 00:13:55.790 align:start position:0% <00:13:52.920>authenticator <00:13:53.075>for <00:13:53.231>sure. <00:13:53.386>Okay, <00:13:53.542>that <00:13:53.697>was <00:13:53.853>basically <00:13:54.008>how <00:13:54.164>you <00:13:54.319>can 00:13:55.790 --> 00:13:55.800 align:start position:0% <00:13:55.790>Okay, <00:13:55.791>that <00:13:55.793>was <00:13:55.794>basically <00:13:55.795>how <00:13:55.797>you <00:13:55.799>can 00:13:55.800 --> 00:13:58.870 align:start position:0% <00:13:55.800>Okay, <00:13:55.907>that <00:13:56.015>was <00:13:56.123>basically <00:13:56.230>how <00:13:56.338>you <00:13:56.446>can <00:13:56.553>enable <00:13:56.661>the <00:13:56.769>whole <00:13:56.876>thing. <00:13:56.984>What <00:13:57.092>are <00:13:57.199>common 00:13:58.870 --> 00:13:58.880 align:start position:0% <00:13:58.870>enable <00:13:58.871>the <00:13:58.873>whole <00:13:58.874>thing. <00:13:58.876>What <00:13:58.877>are <00:13:58.879>common 00:13:58.880 --> 00:14:00.790 align:start position:0% <00:13:58.880>enable <00:13:58.980>the <00:13:59.080>whole <00:13:59.180>thing. <00:13:59.280>What <00:13:59.380>are <00:13:59.480>common <00:13:59.580>pitfalls <00:13:59.680>when <00:13:59.780>we <00:13:59.880>want <00:13:59.980>to <00:14:00.080>enable <00:14:00.180>it <00:14:00.280>or 00:14:00.790 --> 00:14:00.800 align:start position:0% <00:14:00.790>pitfalls <00:14:00.791>when <00:14:00.792>we <00:14:00.793>want <00:14:00.795>to <00:14:00.796>enable <00:14:00.797>it <00:14:00.799>or 00:14:00.800 --> 00:14:04.430 align:start position:0% <00:14:00.800>pitfalls <00:14:00.907>when <00:14:01.015>we <00:14:01.123>want <00:14:01.230>to <00:14:01.338>enable <00:14:01.446>it <00:14:01.553>or <00:14:01.661>integrate <00:14:01.769>that <00:14:01.876>in <00:14:01.984>our <00:14:02.092>web <00:14:02.199>applications? 00:14:04.430 --> 00:14:04.440 align:start position:0% <00:14:04.430>integrate <00:14:04.431>that <00:14:04.433>in <00:14:04.435>our <00:14:04.437>web <00:14:04.439>applications? 00:14:04.440 --> 00:14:08.310 align:start position:0% <00:14:04.440>integrate <00:14:04.540>that <00:14:04.640>in <00:14:04.740>our <00:14:04.840>web <00:14:04.940>applications? <00:14:05.040>There <00:14:05.140>are <00:14:05.240>four <00:14:05.340>I <00:14:05.440>I <00:14:05.540>figured <00:14:05.640>on <00:14:05.740>I <00:14:05.840>figured 00:14:08.310 --> 00:14:08.320 align:start position:0% <00:14:08.310>There <00:14:08.311>are <00:14:08.312>four <00:14:08.313>I <00:14:08.314>I <00:14:08.315>figured <00:14:08.316>on <00:14:08.317>I <00:14:08.319>figured 00:14:08.320 --> 00:14:10.870 align:start position:0% <00:14:08.320>There <00:14:08.420>are <00:14:08.520>four <00:14:08.620>I <00:14:08.720>I <00:14:08.820>figured <00:14:08.920>on <00:14:09.020>I <00:14:09.120>figured <00:14:09.220>critical <00:14:09.320>pitfalls. <00:14:09.420>Of <00:14:09.520>course <00:14:09.620>first <00:14:09.720>of 00:14:10.870 --> 00:14:10.880 align:start position:0% <00:14:10.870>critical <00:14:10.871>pitfalls. <00:14:10.873>Of <00:14:10.875>course <00:14:10.877>first <00:14:10.879>of 00:14:10.880 --> 00:14:13.350 align:start position:0% <00:14:10.880>critical <00:14:11.007>pitfalls. <00:14:11.134>Of <00:14:11.261>course <00:14:11.389>first <00:14:11.516>of <00:14:11.643>all <00:14:11.770>setting <00:14:11.898>the <00:14:12.025>relying <00:14:12.152>party <00:14:12.280>ID. 00:14:13.350 --> 00:14:13.360 align:start position:0% <00:14:13.350>all <00:14:13.351>setting <00:14:13.353>the <00:14:13.355>relying <00:14:13.357>party <00:14:13.359>ID. 00:14:13.360 --> 00:14:16.310 align:start position:0% <00:14:13.360>all <00:14:13.500>setting <00:14:13.640>the <00:14:13.780>relying <00:14:13.920>party <00:14:14.060>ID. <00:14:14.200>Ignoring <00:14:14.340>attestation <00:14:14.480>is <00:14:14.620>something <00:14:14.760>really 00:14:16.310 --> 00:14:16.320 align:start position:0% <00:14:16.310>Ignoring <00:14:16.312>attestation <00:14:16.314>is <00:14:16.316>something <00:14:16.319>really 00:14:16.320 --> 00:14:18.950 align:start position:0% <00:14:16.320>Ignoring <00:14:16.475>attestation <00:14:16.631>is <00:14:16.786>something <00:14:16.942>really <00:14:17.097>crucial. <00:14:17.253>Missing <00:14:17.408>user <00:14:17.564>verification, <00:14:17.720>I 00:14:18.950 --> 00:14:18.960 align:start position:0% <00:14:18.950>crucial. <00:14:18.952>Missing <00:14:18.954>user <00:14:18.956>verification, <00:14:18.959>I 00:14:18.960 --> 00:14:20.430 align:start position:0% <00:14:18.960>crucial. <00:14:19.080>Missing <00:14:19.200>user <00:14:19.320>verification, <00:14:19.441>I <00:14:19.561>guess <00:14:19.681>this <00:14:19.801>is <00:14:19.922>something <00:14:20.042>already <00:14:20.162>you <00:14:20.282>can 00:14:20.430 --> 00:14:20.440 align:start position:0% <00:14:20.430>guess <00:14:20.431>this <00:14:20.433>is <00:14:20.434>something <00:14:20.436>already <00:14:20.437>you <00:14:20.439>can 00:14:20.440 --> 00:14:23.310 align:start position:0% <00:14:20.440>guess <00:14:20.547>this <00:14:20.655>is <00:14:20.763>something <00:14:20.870>already <00:14:20.978>you <00:14:21.086>can <00:14:21.193>imagine <00:14:21.301>what <00:14:21.409>this <00:14:21.516>could <00:14:21.624>mean. <00:14:21.732>And <00:14:21.840>still 00:14:23.310 --> 00:14:23.320 align:start position:0% <00:14:23.310>imagine <00:14:23.311>what <00:14:23.313>this <00:14:23.314>could <00:14:23.316>mean. <00:14:23.317>And <00:14:23.319>still 00:14:23.320 --> 00:14:26.150 align:start position:0% <00:14:23.320>imagine <00:14:23.447>what <00:14:23.574>this <00:14:23.701>could <00:14:23.829>mean. <00:14:23.956>And <00:14:24.083>still <00:14:24.210>having <00:14:24.338>passwords <00:14:24.465>as <00:14:24.592>a <00:14:24.720>fallback 00:14:26.150 --> 00:14:26.160 align:start position:0% <00:14:26.150>having <00:14:26.152>passwords <00:14:26.154>as <00:14:26.156>a <00:14:26.159>fallback 00:14:26.160 --> 00:14:27.390 align:start position:0% <00:14:26.160>having <00:14:26.381>passwords <00:14:26.602>as <00:14:26.824>a <00:14:27.045>fallback <00:14:27.266>alternative 00:14:27.390 --> 00:14:27.400 align:start position:0% alternative 00:14:27.400 --> 00:14:29.710 align:start position:0% <00:14:27.400>alternative <00:14:27.574>is <00:14:27.750>also <00:14:27.925>of <00:14:28.100>course <00:14:28.275>one <00:14:28.449>of <00:14:28.625>the <00:14:28.800>pitfalls. 00:14:29.710 --> 00:14:29.720 align:start position:0% <00:14:29.710>is <00:14:29.711>also <00:14:29.712>of <00:14:29.713>course <00:14:29.715>one <00:14:29.716>of <00:14:29.717>the <00:14:29.719>pitfalls. 00:14:29.720 --> 00:14:31.510 align:start position:0% <00:14:29.720>is <00:14:29.820>also <00:14:29.920>of <00:14:30.020>course <00:14:30.120>one <00:14:30.220>of <00:14:30.320>the <00:14:30.420>pitfalls. <00:14:30.520>So <00:14:30.620>let's <00:14:30.720>start <00:14:30.820>with <00:14:30.920>setting <00:14:31.020>the <00:14:31.120>relying 00:14:31.510 --> 00:14:31.520 align:start position:0% <00:14:31.510>So <00:14:31.511>let's <00:14:31.513>start <00:14:31.514>with <00:14:31.516>setting <00:14:31.517>the <00:14:31.519>relying 00:14:31.520 --> 00:14:34.910 align:start position:0% <00:14:31.520>So <00:14:31.620>let's <00:14:31.720>start <00:14:31.819>with <00:14:31.920>setting <00:14:32.020>the <00:14:32.120>relying <00:14:32.220>party <00:14:32.319>ID. <00:14:32.420>This <00:14:32.520>is <00:14:32.620>really <00:14:32.720>an <00:14:32.819>and <00:14:32.920>tricky 00:14:34.910 --> 00:14:34.920 align:start position:0% <00:14:34.910>party <00:14:34.911>ID. <00:14:34.912>This <00:14:34.913>is <00:14:34.915>really <00:14:34.916>an <00:14:34.917>and <00:14:34.919>tricky 00:14:34.920 --> 00:14:37.550 align:start position:0% <00:14:34.920>party <00:14:35.013>ID. <00:14:35.106>This <00:14:35.199>is <00:14:35.293>really <00:14:35.386>an <00:14:35.479>and <00:14:35.573>tricky <00:14:35.666>thing. <00:14:35.760>So <00:14:35.853>as <00:14:35.946>mentioned, <00:14:36.040>if <00:14:36.133>you <00:14:36.226>want <00:14:36.319>to 00:14:37.550 --> 00:14:37.560 align:start position:0% <00:14:37.550>thing. <00:14:37.551>So <00:14:37.552>as <00:14:37.553>mentioned, <00:14:37.555>if <00:14:37.556>you <00:14:37.557>want <00:14:37.559>to 00:14:37.560 --> 00:14:39.590 align:start position:0% <00:14:37.560>thing. <00:14:37.676>So <00:14:37.793>as <00:14:37.910>mentioned, <00:14:38.026>if <00:14:38.143>you <00:14:38.260>want <00:14:38.376>to <00:14:38.493>set <00:14:38.609>the <00:14:38.726>relying <00:14:38.843>party <00:14:38.959>ID, 00:14:39.590 --> 00:14:39.600 align:start position:0% <00:14:39.590>set <00:14:39.592>the <00:14:39.594>relying <00:14:39.596>party <00:14:39.599>ID, 00:14:39.600 --> 00:14:42.590 align:start position:0% <00:14:39.600>set <00:14:39.727>the <00:14:39.854>relying <00:14:39.981>party <00:14:40.109>ID, <00:14:40.236>um <00:14:40.363>it's <00:14:40.490>actually <00:14:40.618>still <00:14:40.745>possible. <00:14:40.872>Let <00:14:41.000>me 00:14:42.590 --> 00:14:42.600 align:start position:0% <00:14:42.590>um <00:14:42.591>it's <00:14:42.593>actually <00:14:42.594>still <00:14:42.596>possible. <00:14:42.597>Let <00:14:42.599>me 00:14:42.600 --> 00:14:45.070 align:start position:0% <00:14:42.600>um <00:14:42.700>it's <00:14:42.800>actually <00:14:42.900>still <00:14:43.000>possible. <00:14:43.100>Let <00:14:43.200>me <00:14:43.300>shortly <00:14:43.400>go <00:14:43.500>back <00:14:43.600>to <00:14:43.700>this <00:14:43.800>one <00:14:43.900>over <00:14:44.000>here. 00:14:45.070 --> 00:14:45.080 align:start position:0% <00:14:45.070>shortly <00:14:45.071>go <00:14:45.072>back <00:14:45.073>to <00:14:45.075>this <00:14:45.076>one <00:14:45.077>over <00:14:45.079>here. 00:14:45.080 --> 00:14:47.590 align:start position:0% <00:14:45.080>shortly <00:14:45.173>go <00:14:45.266>back <00:14:45.360>to <00:14:45.453>this <00:14:45.546>one <00:14:45.640>over <00:14:45.733>here. <00:14:45.826>So <00:14:45.920>let's <00:14:46.013>say <00:14:46.106>you <00:14:46.200>set <00:14:46.293>your <00:14:46.386>relying <00:14:46.480>party 00:14:47.590 --> 00:14:47.600 align:start position:0% <00:14:47.590>So <00:14:47.591>let's <00:14:47.592>say <00:14:47.593>you <00:14:47.595>set <00:14:47.596>your <00:14:47.597>relying <00:14:47.599>party 00:14:47.600 --> 00:14:51.670 align:start position:0% <00:14:47.600>So <00:14:47.707>let's <00:14:47.815>say <00:14:47.923>you <00:14:48.030>set <00:14:48.138>your <00:14:48.246>relying <00:14:48.353>party <00:14:48.461>ID <00:14:48.569>to <00:14:48.676>I <00:14:48.784>don't <00:14:48.892>know <00:14:49.000>shop.com. 00:14:51.670 --> 00:14:51.680 align:start position:0% <00:14:51.670>ID <00:14:51.671>to <00:14:51.673>I <00:14:51.675>don't <00:14:51.677>know <00:14:51.679>shop.com. 00:14:51.680 --> 00:14:54.910 align:start position:0% <00:14:51.680>ID <00:14:51.796>to <00:14:51.913>I <00:14:52.030>don't <00:14:52.146>know <00:14:52.263>shop.com. <00:14:52.380>That <00:14:52.496>means <00:14:52.613>your <00:14:52.729>passkey <00:14:52.846>would <00:14:52.963>also <00:14:53.079>work 00:14:54.910 --> 00:14:54.920 align:start position:0% <00:14:54.910>That <00:14:54.911>means <00:14:54.913>your <00:14:54.914>passkey <00:14:54.915>would <00:14:54.917>also <00:14:54.919>work 00:14:54.920 --> 00:14:57.470 align:start position:0% <00:14:54.920>That <00:14:55.060>means <00:14:55.199>your <00:14:55.339>passkey <00:14:55.479>would <00:14:55.620>also <00:14:55.760>work <00:14:55.900>for <00:14:56.040>subdomains <00:14:56.180>like <00:14:56.319>shop.com, 00:14:57.470 --> 00:14:57.480 align:start position:0% <00:14:57.470>for <00:14:57.473>subdomains <00:14:57.476>like <00:14:57.479>shop.com, 00:14:57.480 --> 00:15:00.350 align:start position:0% <00:14:57.480>for <00:14:57.760>subdomains <00:14:58.040>like <00:14:58.320>shop.com, <00:14:58.600>app.shop.com, <00:14:58.880>www.shop.com, 00:15:00.350 --> 00:15:00.360 align:start position:0% <00:15:00.350>app.shop.com, <00:15:00.359>www.shop.com, 00:15:00.360 --> 00:15:02.910 align:start position:0% <00:15:00.360>app.shop.com, <00:15:00.560>www.shop.com, <00:15:00.760>all <00:15:00.960>subdomains <00:15:01.160>basically. <00:15:01.360>So <00:15:01.560>having <00:15:01.760>this 00:15:02.910 --> 00:15:02.920 align:start position:0% <00:15:02.910>all <00:15:02.911>subdomains <00:15:02.913>basically. <00:15:02.915>So <00:15:02.917>having <00:15:02.919>this 00:15:02.920 --> 00:15:05.750 align:start position:0% <00:15:02.920>all <00:15:03.027>subdomains <00:15:03.135>basically. <00:15:03.243>So <00:15:03.350>having <00:15:03.458>this <00:15:03.566>kind <00:15:03.673>of <00:15:03.781>so <00:15:03.889>called <00:15:03.996>apex <00:15:04.104>domain <00:15:04.212>works <00:15:04.319>in 00:15:05.750 --> 00:15:05.760 align:start position:0% <00:15:05.750>kind <00:15:05.751>of <00:15:05.752>so <00:15:05.753>called <00:15:05.755>apex <00:15:05.756>domain <00:15:05.757>works <00:15:05.759>in 00:15:05.760 --> 00:15:07.790 align:start position:0% <00:15:05.760>kind <00:15:05.867>of <00:15:05.975>so <00:15:06.083>called <00:15:06.190>apex <00:15:06.298>domain <00:15:06.406>works <00:15:06.513>in <00:15:06.621>scenarios <00:15:06.729>where <00:15:06.836>you <00:15:06.944>might <00:15:07.052>have <00:15:07.160>single 00:15:07.790 --> 00:15:07.800 align:start position:0% <00:15:07.790>scenarios <00:15:07.791>where <00:15:07.793>you <00:15:07.795>might <00:15:07.797>have <00:15:07.799>single 00:15:07.800 --> 00:15:10.190 align:start position:0% <00:15:07.800>scenarios <00:15:07.907>where <00:15:08.015>you <00:15:08.123>might <00:15:08.230>have <00:15:08.338>single <00:15:08.446>sign <00:15:08.553>on <00:15:08.661>and <00:15:08.769>having <00:15:08.876>a <00:15:08.984>couple <00:15:09.092>of <00:15:09.199>redirects 00:15:10.190 --> 00:15:10.200 align:start position:0% <00:15:10.190>sign <00:15:10.191>on <00:15:10.192>and <00:15:10.193>having <00:15:10.195>a <00:15:10.196>couple <00:15:10.197>of <00:15:10.199>redirects 00:15:10.200 --> 00:15:13.030 align:start position:0% <00:15:10.200>sign <00:15:10.293>on <00:15:10.386>and <00:15:10.480>having <00:15:10.573>a <00:15:10.666>couple <00:15:10.760>of <00:15:10.853>redirects <00:15:10.946>and <00:15:11.040>and <00:15:11.133>you <00:15:11.226>need <00:15:11.320>this <00:15:11.413>kind <00:15:11.506>of <00:15:11.600>subdomain 00:15:13.030 --> 00:15:13.040 align:start position:0% <00:15:13.030>and <00:15:13.031>and <00:15:13.032>you <00:15:13.033>need <00:15:13.035>this <00:15:13.036>kind <00:15:13.037>of <00:15:13.039>subdomain 00:15:13.040 --> 00:15:13.790 align:start position:0% <00:15:13.040>and <00:15:13.124>and <00:15:13.208>you <00:15:13.293>need <00:15:13.377>this <00:15:13.461>kind <00:15:13.546>of <00:15:13.630>subdomain <00:15:13.714>um 00:15:13.790 --> 00:15:13.800 align:start position:0% um 00:15:13.800 --> 00:15:16.910 align:start position:0% <00:15:13.800>um <00:15:14.033>possibility. <00:15:14.266>I <00:15:14.500>highly <00:15:14.733>recommend <00:15:14.966>to <00:15:15.199>not 00:15:16.910 --> 00:15:16.920 align:start position:0% <00:15:16.910>possibility. <00:15:16.911>I <00:15:16.913>highly <00:15:16.915>recommend <00:15:16.917>to <00:15:16.919>not 00:15:16.920 --> 00:15:19.310 align:start position:0% <00:15:16.920>possibility. <00:15:17.020>I <00:15:17.120>highly <00:15:17.219>recommend <00:15:17.319>to <00:15:17.420>not <00:15:17.520>do <00:15:17.620>that. <00:15:17.719>I <00:15:17.819>I <00:15:17.920>really <00:15:18.020>if <00:15:18.120>you <00:15:18.219>have <00:15:18.319>the 00:15:19.310 --> 00:15:19.320 align:start position:0% <00:15:19.310>do <00:15:19.311>that. <00:15:19.312>I <00:15:19.313>I <00:15:19.314>really <00:15:19.315>if <00:15:19.316>you <00:15:19.317>have <00:15:19.319>the 00:15:19.320 --> 00:15:22.750 align:start position:0% <00:15:19.320>do <00:15:19.413>that. <00:15:19.506>I <00:15:19.600>I <00:15:19.693>really <00:15:19.786>if <00:15:19.880>you <00:15:19.973>have <00:15:20.066>the <00:15:20.160>possibility, <00:15:20.253>narrow <00:15:20.346>it <00:15:20.440>down <00:15:20.533>as <00:15:20.626>as <00:15:20.720>strong 00:15:22.750 --> 00:15:22.760 align:start position:0% <00:15:22.750>possibility, <00:15:22.751>narrow <00:15:22.753>it <00:15:22.754>down <00:15:22.756>as <00:15:22.757>as <00:15:22.759>strong 00:15:22.760 --> 00:15:24.830 align:start position:0% <00:15:22.760>possibility, <00:15:22.867>narrow <00:15:22.975>it <00:15:23.083>down <00:15:23.190>as <00:15:23.298>as <00:15:23.406>strong <00:15:23.513>as <00:15:23.621>possible <00:15:23.729>that <00:15:23.836>it's <00:15:23.944>really <00:15:24.052>as <00:15:24.160>as 00:15:24.830 --> 00:15:24.840 align:start position:0% <00:15:24.830>as <00:15:24.831>possible <00:15:24.833>that <00:15:24.834>it's <00:15:24.836>really <00:15:24.837>as <00:15:24.839>as 00:15:24.840 --> 00:15:27.510 align:start position:0% <00:15:24.840>as <00:15:24.947>possible <00:15:25.055>that <00:15:25.163>it's <00:15:25.270>really <00:15:25.378>as <00:15:25.486>as <00:15:25.593>strict <00:15:25.701>as <00:15:25.809>string <00:15:25.916>matching. <00:15:26.024>I <00:15:26.132>mean, <00:15:26.240>if 00:15:27.510 --> 00:15:27.520 align:start position:0% <00:15:27.510>strict <00:15:27.511>as <00:15:27.513>string <00:15:27.514>matching. <00:15:27.516>I <00:15:27.517>mean, <00:15:27.519>if 00:15:27.520 --> 00:15:29.470 align:start position:0% <00:15:27.520>strict <00:15:27.613>as <00:15:27.706>string <00:15:27.800>matching. <00:15:27.893>I <00:15:27.986>mean, <00:15:28.079>if <00:15:28.173>you <00:15:28.266>if <00:15:28.360>you <00:15:28.453>run <00:15:28.546>Keycloak, <00:15:28.640>you <00:15:28.733>run <00:15:28.826>it <00:15:28.920>on 00:15:29.470 --> 00:15:29.480 align:start position:0% <00:15:29.470>you <00:15:29.471>if <00:15:29.472>you <00:15:29.473>run <00:15:29.474>Keycloak, <00:15:29.475>you <00:15:29.476>run <00:15:29.477>it <00:15:29.479>on 00:15:29.480 --> 00:15:31.830 align:start position:0% <00:15:29.480>you <00:15:29.567>if <00:15:29.655>you <00:15:29.742>run <00:15:29.830>Keycloak, <00:15:29.917>you <00:15:30.005>run <00:15:30.092>it <00:15:30.180>on <00:15:30.267>one <00:15:30.355>specific <00:15:30.442>kind <00:15:30.530>of <00:15:30.617>domain, <00:15:30.705>so <00:15:30.792>you <00:15:30.880>can 00:15:31.830 --> 00:15:31.840 align:start position:0% <00:15:31.830>one <00:15:31.831>specific <00:15:31.832>kind <00:15:31.833>of <00:15:31.835>domain, <00:15:31.836>so <00:15:31.837>you <00:15:31.839>can 00:15:31.840 --> 00:15:35.190 align:start position:0% <00:15:31.840>one <00:15:31.940>specific <00:15:32.040>kind <00:15:32.140>of <00:15:32.240>domain, <00:15:32.340>so <00:15:32.440>you <00:15:32.540>can <00:15:32.640>really <00:15:32.740>type <00:15:32.840>into <00:15:32.940>maybe <00:15:33.040>like <00:15:33.140>your <00:15:33.240>auth 00:15:35.190 --> 00:15:35.200 align:start position:0% <00:15:35.190>really <00:15:35.191>type <00:15:35.193>into <00:15:35.194>maybe <00:15:35.196>like <00:15:35.197>your <00:15:35.199>auth 00:15:35.200 --> 00:15:36.790 align:start position:0% <00:15:35.200>really <00:15:35.400>type <00:15:35.600>into <00:15:35.800>maybe <00:15:36.000>like <00:15:36.200>your <00:15:36.400>auth <00:15:36.600>server 00:15:36.790 --> 00:15:36.800 align:start position:0% server 00:15:36.800 --> 00:15:38.430 align:start position:0% <00:15:36.800>server <00:15:38.199>.com. 00:15:38.430 --> 00:15:38.440 align:start position:0% .com. 00:15:38.440 --> 00:15:41.510 align:start position:0% <00:15:38.440>.com. <00:15:38.615>And <00:15:38.790>then <00:15:38.965>that's <00:15:39.140>it. <00:15:39.315>If <00:15:39.490>and <00:15:39.665>a <00:15:39.840>second 00:15:41.510 --> 00:15:41.520 align:start position:0% <00:15:41.510>And <00:15:41.511>then <00:15:41.512>that's <00:15:41.513>it. <00:15:41.515>If <00:15:41.516>and <00:15:41.517>a <00:15:41.519>second 00:15:41.520 --> 00:15:43.430 align:start position:0% <00:15:41.520>And <00:15:41.620>then <00:15:41.720>that's <00:15:41.819>it. <00:15:41.920>If <00:15:42.020>and <00:15:42.120>a <00:15:42.220>second <00:15:42.319>thought, <00:15:42.420>if <00:15:42.520>you <00:15:42.620>need <00:15:42.720>to <00:15:42.819>have <00:15:42.920>the 00:15:43.430 --> 00:15:43.440 align:start position:0% <00:15:43.430>thought, <00:15:43.431>if <00:15:43.433>you <00:15:43.434>need <00:15:43.436>to <00:15:43.437>have <00:15:43.439>the 00:15:43.440 --> 00:15:45.390 align:start position:0% <00:15:43.440>thought, <00:15:43.567>if <00:15:43.694>you <00:15:43.821>need <00:15:43.949>to <00:15:44.076>have <00:15:44.203>the <00:15:44.330>possibility <00:15:44.458>to <00:15:44.585>have <00:15:44.712>really <00:15:44.840>the 00:15:45.390 --> 00:15:45.400 align:start position:0% <00:15:45.390>possibility <00:15:45.392>to <00:15:45.394>have <00:15:45.396>really <00:15:45.399>the 00:15:45.400 --> 00:15:47.070 align:start position:0% <00:15:45.400>possibility <00:15:45.680>to <00:15:45.959>have <00:15:46.240>really <00:15:46.520>the <00:15:46.800>subdomains, 00:15:47.070 --> 00:15:47.080 align:start position:0% subdomains, 00:15:47.080 --> 00:15:49.390 align:start position:0% <00:15:47.080>subdomains, <00:15:47.255>then <00:15:47.430>take <00:15:47.605>care <00:15:47.780>of <00:15:47.955>your <00:15:48.130>DNS <00:15:48.305>records. <00:15:48.480>Take 00:15:49.390 --> 00:15:49.400 align:start position:0% <00:15:49.390>then <00:15:49.391>take <00:15:49.392>care <00:15:49.393>of <00:15:49.395>your <00:15:49.396>DNS <00:15:49.397>records. <00:15:49.399>Take 00:15:49.400 --> 00:15:51.670 align:start position:0% <00:15:49.400>then <00:15:49.500>take <00:15:49.600>care <00:15:49.699>of <00:15:49.800>your <00:15:49.900>DNS <00:15:50.000>records. <00:15:50.100>Take <00:15:50.199>care <00:15:50.300>of <00:15:50.400>your <00:15:50.500>CNAME <00:15:50.600>records <00:15:50.699>because <00:15:50.800>a 00:15:51.670 --> 00:15:51.680 align:start position:0% <00:15:51.670>care <00:15:51.671>of <00:15:51.673>your <00:15:51.674>CNAME <00:15:51.675>records <00:15:51.677>because <00:15:51.679>a 00:15:51.680 --> 00:15:54.870 align:start position:0% <00:15:51.680>care <00:15:51.807>of <00:15:51.934>your <00:15:52.061>CNAME <00:15:52.189>records <00:15:52.316>because <00:15:52.443>a <00:15:52.570>subdomain <00:15:52.698>takeover <00:15:52.825>attack <00:15:52.952>is <00:15:53.079>possible. 00:15:54.870 --> 00:15:54.880 align:start position:0% <00:15:54.870>subdomain <00:15:54.872>takeover <00:15:54.874>attack <00:15:54.876>is <00:15:54.879>possible. 00:15:54.880 --> 00:15:57.750 align:start position:0% <00:15:54.880>subdomain <00:15:54.987>takeover <00:15:55.095>attack <00:15:55.203>is <00:15:55.310>possible. <00:15:55.418>So, <00:15:55.526>just <00:15:55.633>be <00:15:55.741>aware <00:15:55.849>that <00:15:55.956>you <00:15:56.064>have <00:15:56.172>you <00:15:56.280>keep 00:15:57.750 --> 00:15:57.760 align:start position:0% <00:15:57.750>So, <00:15:57.751>just <00:15:57.752>be <00:15:57.753>aware <00:15:57.754>that <00:15:57.755>you <00:15:57.756>have <00:15:57.757>you <00:15:57.759>keep 00:15:57.760 --> 00:16:00.150 align:start position:0% <00:15:57.760>So, <00:15:57.867>just <00:15:57.975>be <00:15:58.083>aware <00:15:58.190>that <00:15:58.298>you <00:15:58.406>have <00:15:58.513>you <00:15:58.621>keep <00:15:58.729>your <00:15:58.836>DNS <00:15:58.944>records <00:15:59.052>really <00:15:59.160>strongly 00:16:00.150 --> 00:16:00.160 align:start position:0% <00:16:00.150>your <00:16:00.152>DNS <00:16:00.154>records <00:16:00.156>really <00:16:00.159>strongly 00:16:00.160 --> 00:16:03.070 align:start position:0% <00:16:00.160>your <00:16:00.300>DNS <00:16:00.439>records <00:16:00.579>really <00:16:00.719>strongly <00:16:00.860>observed <00:16:01.000>that <00:16:01.140>this <00:16:01.280>can't <00:16:01.420>that <00:16:01.560>someone 00:16:03.070 --> 00:16:03.080 align:start position:0% <00:16:03.070>observed <00:16:03.071>that <00:16:03.073>this <00:16:03.075>can't <00:16:03.077>that <00:16:03.079>someone 00:16:03.080 --> 00:16:05.270 align:start position:0% <00:16:03.080>observed <00:16:03.207>that <00:16:03.334>this <00:16:03.461>can't <00:16:03.589>that <00:16:03.716>someone <00:16:03.843>like <00:16:03.970>a <00:16:04.098>dangling <00:16:04.225>subdomain <00:16:04.352>does <00:16:04.480>not 00:16:05.270 --> 00:16:05.280 align:start position:0% <00:16:05.270>like <00:16:05.271>a <00:16:05.273>dangling <00:16:05.275>subdomain <00:16:05.277>does <00:16:05.279>not 00:16:05.280 --> 00:16:08.710 align:start position:0% <00:16:05.280>like <00:16:05.407>a <00:16:05.534>dangling <00:16:05.661>subdomain <00:16:05.789>does <00:16:05.916>not <00:16:06.043>happen <00:16:06.170>and <00:16:06.298>someone <00:16:06.425>steals <00:16:06.552>it <00:16:06.680>maybe. 00:16:08.710 --> 00:16:08.720 align:start position:0% <00:16:08.710>happen <00:16:08.711>and <00:16:08.713>someone <00:16:08.715>steals <00:16:08.717>it <00:16:08.719>maybe. 00:16:08.720 --> 00:16:10.950 align:start position:0% <00:16:08.720>happen <00:16:08.827>and <00:16:08.935>someone <00:16:09.043>steals <00:16:09.150>it <00:16:09.258>maybe. <00:16:09.366>So, <00:16:09.473>it's <00:16:09.581>I <00:16:09.689>said <00:16:09.796>it's <00:16:09.904>a <00:16:10.012>little <00:16:10.120>bit 00:16:10.950 --> 00:16:10.960 align:start position:0% <00:16:10.950>So, <00:16:10.951>it's <00:16:10.952>I <00:16:10.953>said <00:16:10.955>it's <00:16:10.956>a <00:16:10.957>little <00:16:10.959>bit 00:16:10.960 --> 00:16:13.190 align:start position:0% <00:16:10.960>So, <00:16:11.053>it's <00:16:11.146>I <00:16:11.240>said <00:16:11.333>it's <00:16:11.426>a <00:16:11.520>little <00:16:11.613>bit <00:16:11.706>tricky, <00:16:11.800>so <00:16:11.893>set <00:16:11.986>the <00:16:12.080>relying <00:16:12.173>party <00:16:12.266>ID <00:16:12.360>as 00:16:13.190 --> 00:16:13.200 align:start position:0% <00:16:13.190>tricky, <00:16:13.191>so <00:16:13.192>set <00:16:13.193>the <00:16:13.195>relying <00:16:13.196>party <00:16:13.197>ID <00:16:13.199>as 00:16:13.200 --> 00:16:15.750 align:start position:0% <00:16:13.200>tricky, <00:16:13.287>so <00:16:13.375>set <00:16:13.462>the <00:16:13.550>relying <00:16:13.637>party <00:16:13.725>ID <00:16:13.812>as <00:16:13.900>specific <00:16:13.987>as <00:16:14.075>you <00:16:14.162>can, <00:16:14.250>but <00:16:14.337>as <00:16:14.425>broad <00:16:14.512>as <00:16:14.600>you 00:16:15.750 --> 00:16:15.760 align:start position:0% <00:16:15.750>specific <00:16:15.751>as <00:16:15.752>you <00:16:15.753>can, <00:16:15.754>but <00:16:15.755>as <00:16:15.756>broad <00:16:15.757>as <00:16:15.759>you 00:16:15.760 --> 00:16:17.710 align:start position:0% <00:16:15.760>specific <00:16:15.853>as <00:16:15.946>you <00:16:16.040>can, <00:16:16.133>but <00:16:16.226>as <00:16:16.319>broad <00:16:16.413>as <00:16:16.506>you <00:16:16.600>must. <00:16:16.693>The <00:16:16.786>best <00:16:16.880>case, <00:16:16.973>of <00:16:17.066>course, <00:16:17.160>as 00:16:17.710 --> 00:16:17.720 align:start position:0% <00:16:17.710>must. <00:16:17.711>The <00:16:17.713>best <00:16:17.714>case, <00:16:17.716>of <00:16:17.717>course, <00:16:17.719>as 00:16:17.720 --> 00:16:19.510 align:start position:0% <00:16:17.720>must. <00:16:17.860>The <00:16:18.000>best <00:16:18.140>case, <00:16:18.280>of <00:16:18.420>course, <00:16:18.560>as <00:16:18.700>strict <00:16:18.840>as <00:16:18.980>you <00:16:19.120>can 00:16:19.510 --> 00:16:19.520 align:start position:0% <00:16:19.510>strict <00:16:19.513>as <00:16:19.516>you <00:16:19.519>can 00:16:19.520 --> 00:16:22.230 align:start position:0% <00:16:19.520>strict <00:16:19.675>as <00:16:19.831>you <00:16:19.986>can <00:16:20.142>because <00:16:20.297>you <00:16:20.453>can't <00:16:20.608>migrate <00:16:20.764>your <00:16:20.920>passkeys 00:16:22.230 --> 00:16:22.240 align:start position:0% <00:16:22.230>because <00:16:22.231>you <00:16:22.233>can't <00:16:22.235>migrate <00:16:22.237>your <00:16:22.239>passkeys 00:16:22.240 --> 00:16:25.270 align:start position:0% <00:16:22.240>because <00:16:22.380>you <00:16:22.520>can't <00:16:22.660>migrate <00:16:22.800>your <00:16:22.940>passkeys <00:16:23.080>later. <00:16:23.220>So, <00:16:23.360>it's <00:16:23.500>not <00:16:23.640>something 00:16:25.270 --> 00:16:25.280 align:start position:0% <00:16:25.270>later. <00:16:25.272>So, <00:16:25.274>it's <00:16:25.276>not <00:16:25.279>something 00:16:25.280 --> 00:16:27.110 align:start position:0% <00:16:25.280>later. <00:16:25.396>So, <00:16:25.513>it's <00:16:25.630>not <00:16:25.746>something <00:16:25.863>I <00:16:25.980>mean, <00:16:26.096>imagine <00:16:26.213>you <00:16:26.329>would <00:16:26.446>need <00:16:26.563>to <00:16:26.680>tell 00:16:27.110 --> 00:16:27.120 align:start position:0% <00:16:27.110>I <00:16:27.111>mean, <00:16:27.112>imagine <00:16:27.113>you <00:16:27.115>would <00:16:27.116>need <00:16:27.117>to <00:16:27.119>tell 00:16:27.120 --> 00:16:29.470 align:start position:0% <00:16:27.120>I <00:16:27.236>mean, <00:16:27.353>imagine <00:16:27.470>you <00:16:27.586>would <00:16:27.703>need <00:16:27.820>to <00:16:27.936>tell <00:16:28.053>the <00:16:28.170>authenticator <00:16:28.286>or <00:16:28.403>the <00:16:28.520>authenticator, 00:16:29.470 --> 00:16:29.480 align:start position:0% <00:16:29.470>the <00:16:29.472>authenticator <00:16:29.474>or <00:16:29.476>the <00:16:29.479>authenticator, 00:16:29.480 --> 00:16:32.510 align:start position:0% <00:16:29.480>the <00:16:29.596>authenticator <00:16:29.713>or <00:16:29.830>the <00:16:29.946>authenticator, <00:16:30.063>I <00:16:30.180>created <00:16:30.296>a <00:16:30.413>passkeys <00:16:30.530>on <00:16:30.646>app.com <00:16:30.763>and <00:16:30.880>now 00:16:32.510 --> 00:16:32.520 align:start position:0% <00:16:32.510>I <00:16:32.511>created <00:16:32.512>a <00:16:32.513>passkeys <00:16:32.515>on <00:16:32.516>app.com <00:16:32.517>and <00:16:32.519>now 00:16:32.520 --> 00:16:35.630 align:start position:0% <00:16:32.520>I <00:16:32.647>created <00:16:32.774>a <00:16:32.901>passkeys <00:16:33.029>on <00:16:33.156>app.com <00:16:33.283>and <00:16:33.410>now <00:16:33.538>change <00:16:33.665>it <00:16:33.792>to <00:16:33.920>www.app.com. 00:16:35.630 --> 00:16:35.640 align:start position:0% <00:16:35.630>change <00:16:35.633>it <00:16:35.636>to <00:16:35.639>www.app.com. 00:16:35.640 --> 00:16:37.390 align:start position:0% <00:16:35.640>change <00:16:35.780>it <00:16:35.920>to <00:16:36.060>www.app.com. <00:16:36.199>You <00:16:36.340>can't <00:16:36.480>you <00:16:36.620>can't <00:16:36.760>do <00:16:36.900>something <00:16:37.040>There's 00:16:37.390 --> 00:16:37.400 align:start position:0% <00:16:37.390>You <00:16:37.391>can't <00:16:37.393>you <00:16:37.394>can't <00:16:37.396>do <00:16:37.397>something <00:16:37.399>There's 00:16:37.400 --> 00:16:39.670 align:start position:0% <00:16:37.400>You <00:16:37.507>can't <00:16:37.615>you <00:16:37.723>can't <00:16:37.830>do <00:16:37.938>something <00:16:38.046>There's <00:16:38.153>no <00:16:38.261>such <00:16:38.369>specification <00:16:38.476>for <00:16:38.584>that, <00:16:38.692>so <00:16:38.800>you 00:16:39.670 --> 00:16:39.680 align:start position:0% <00:16:39.670>no <00:16:39.671>such <00:16:39.673>specification <00:16:39.674>for <00:16:39.675>that, <00:16:39.677>so <00:16:39.679>you 00:16:39.680 --> 00:16:42.030 align:start position:0% <00:16:39.680>no <00:16:39.780>such <00:16:39.880>specification <00:16:39.979>for <00:16:40.079>that, <00:16:40.180>so <00:16:40.280>you <00:16:40.380>can't <00:16:40.479>migrate <00:16:40.579>them <00:16:40.680>in <00:16:40.780>a <00:16:40.880>way. <00:16:40.979>So, <00:16:41.079>you 00:16:42.030 --> 00:16:42.040 align:start position:0% <00:16:42.030>can't <00:16:42.031>migrate <00:16:42.032>them <00:16:42.033>in <00:16:42.035>a <00:16:42.036>way. <00:16:42.037>So, <00:16:42.039>you 00:16:42.040 --> 00:16:43.510 align:start position:0% <00:16:42.040>can't <00:16:42.134>migrate <00:16:42.228>them <00:16:42.323>in <00:16:42.418>a <00:16:42.512>way. <00:16:42.607>So, <00:16:42.701>you <00:16:42.795>need <00:16:42.890>to <00:16:42.985>be <00:16:43.079>really <00:16:43.174>strict <00:16:43.268>from <00:16:43.363>the 00:16:43.510 --> 00:16:43.520 align:start position:0% <00:16:43.510>need <00:16:43.511>to <00:16:43.513>be <00:16:43.514>really <00:16:43.516>strict <00:16:43.517>from <00:16:43.519>the 00:16:43.520 --> 00:16:46.230 align:start position:0% <00:16:43.520>need <00:16:43.720>to <00:16:43.920>be <00:16:44.120>really <00:16:44.319>strict <00:16:44.520>from <00:16:44.720>the <00:16:44.920>beginning. 00:16:46.240 --> 00:16:48.750 align:start position:0% <00:16:46.240>Talking <00:16:46.706>about <00:16:47.173>user <00:16:47.640>verification, 00:16:48.750 --> 00:16:48.760 align:start position:0% <00:16:48.750>Talking <00:16:48.753>about <00:16:48.756>user <00:16:48.759>verification, 00:16:48.760 --> 00:16:50.070 align:start position:0% <00:16:48.760>Talking <00:16:48.891>about <00:16:49.022>user <00:16:49.153>verification, <00:16:49.284>I <00:16:49.415>guess <00:16:49.546>this <00:16:49.677>is <00:16:49.808>kind <00:16:49.939>of 00:16:50.070 --> 00:16:50.080 align:start position:0% <00:16:50.070>I <00:16:50.071>guess <00:16:50.073>this <00:16:50.075>is <00:16:50.077>kind <00:16:50.079>of 00:16:50.080 --> 00:16:52.550 align:start position:0% <00:16:50.080>I <00:16:50.313>guess <00:16:50.546>this <00:16:50.780>is <00:16:51.013>kind <00:16:51.246>of <00:16:51.480>self-explainable. 00:16:52.550 --> 00:16:52.560 align:start position:0% self-explainable. 00:16:52.560 --> 00:16:54.350 align:start position:0% <00:16:52.560>self-explainable. <00:16:52.734>It <00:16:52.910>actually <00:16:53.084>means <00:16:53.260>when <00:16:53.435>you <00:16:53.609>log <00:16:53.785>in <00:16:53.959>with 00:16:54.350 --> 00:16:54.360 align:start position:0% <00:16:54.350>It <00:16:54.351>actually <00:16:54.352>means <00:16:54.353>when <00:16:54.355>you <00:16:54.356>log <00:16:54.357>in <00:16:54.359>with 00:16:54.360 --> 00:16:56.390 align:start position:0% <00:16:54.360>It <00:16:54.460>actually <00:16:54.560>means <00:16:54.660>when <00:16:54.760>you <00:16:54.860>log <00:16:54.960>in <00:16:55.060>with <00:16:55.160>your <00:16:55.260>passkey <00:16:55.360>or <00:16:55.460>create <00:16:55.560>a <00:16:55.660>passkey <00:16:55.760>that 00:16:56.390 --> 00:16:56.400 align:start position:0% <00:16:56.390>your <00:16:56.391>passkey <00:16:56.393>or <00:16:56.394>create <00:16:56.396>a <00:16:56.397>passkey <00:16:56.399>that 00:16:56.400 --> 00:16:58.550 align:start position:0% <00:16:56.400>your <00:16:56.516>passkey <00:16:56.633>or <00:16:56.750>create <00:16:56.866>a <00:16:56.983>passkey <00:16:57.100>that <00:16:57.216>your <00:16:57.333>authenticator <00:16:57.449>asks <00:16:57.566>the <00:16:57.683>user <00:16:57.800>again 00:16:58.550 --> 00:16:58.560 align:start position:0% <00:16:58.550>your <00:16:58.551>authenticator <00:16:58.553>asks <00:16:58.555>the <00:16:58.557>user <00:16:58.559>again 00:16:58.560 --> 00:17:00.110 align:start position:0% <00:16:58.560>your <00:16:58.759>authenticator <00:16:58.958>asks <00:16:59.157>the <00:16:59.357>user <00:16:59.556>again <00:16:59.755>to <00:16:59.955>verify. 00:17:00.110 --> 00:17:00.120 align:start position:0% <00:17:00.110>to <00:17:00.119>verify. 00:17:00.120 --> 00:17:02.390 align:start position:0% <00:17:00.120>to <00:17:00.295>verify. <00:17:00.470>Mainly <00:17:00.645>by <00:17:00.820>giving <00:17:00.995>a <00:17:01.170>fingerprint <00:17:01.345>or <00:17:01.520>facial 00:17:02.390 --> 00:17:02.400 align:start position:0% <00:17:02.390>Mainly <00:17:02.391>by <00:17:02.393>giving <00:17:02.394>a <00:17:02.396>fingerprint <00:17:02.397>or <00:17:02.399>facial 00:17:02.400 --> 00:17:04.350 align:start position:0% <00:17:02.400>Mainly <00:17:02.516>by <00:17:02.633>giving <00:17:02.750>a <00:17:02.866>fingerprint <00:17:02.983>or <00:17:03.100>facial <00:17:03.216>recognition <00:17:03.333>or <00:17:03.449>something <00:17:03.566>that <00:17:03.683>tells <00:17:03.800>the 00:17:04.350 --> 00:17:04.360 align:start position:0% <00:17:04.349>recognition <00:17:04.351>or <00:17:04.353>something <00:17:04.355>that <00:17:04.357>tells <00:17:04.358>the 00:17:04.360 --> 00:17:05.870 align:start position:0% <00:17:04.359>recognition <00:17:04.483>or <00:17:04.607>something <00:17:04.730>that <00:17:04.854>tells <00:17:04.977>the <00:17:05.101>tells <00:17:05.224>the <00:17:05.348>authenticator, <00:17:05.471>yes, <00:17:05.595>you <00:17:05.718>are 00:17:05.870 --> 00:17:05.880 align:start position:0% <00:17:05.869>tells <00:17:05.871>the <00:17:05.873>authenticator, <00:17:05.875>yes, <00:17:05.877>you <00:17:05.879>are 00:17:05.880 --> 00:17:08.030 align:start position:0% <00:17:05.880>tells <00:17:06.007>the <00:17:06.134>authenticator, <00:17:06.261>yes, <00:17:06.389>you <00:17:06.516>are <00:17:06.643>allowed <00:17:06.770>to <00:17:06.898>use <00:17:07.025>the <00:17:07.152>passkey <00:17:07.280>then. 00:17:08.030 --> 00:17:08.040 align:start position:0% <00:17:08.030>allowed <00:17:08.031>to <00:17:08.033>use <00:17:08.035>the <00:17:08.037>passkey <00:17:08.039>then. 00:17:08.040 --> 00:17:10.829 align:start position:0% <00:17:08.040>allowed <00:17:08.167>to <00:17:08.294>use <00:17:08.421>the <00:17:08.549>passkey <00:17:08.676>then. <00:17:08.803>Otherwise, <00:17:08.930>it <00:17:09.058>opens <00:17:09.185>for <00:17:09.312>really <00:17:09.440>strange 00:17:10.829 --> 00:17:10.839 align:start position:0% <00:17:10.829>Otherwise, <00:17:10.830>it <00:17:10.832>opens <00:17:10.834>for <00:17:10.836>really <00:17:10.838>strange 00:17:10.839 --> 00:17:12.150 align:start position:0% <00:17:10.839>Otherwise, <00:17:11.035>it <00:17:11.232>opens <00:17:11.428>for <00:17:11.625>really <00:17:11.822>strange <00:17:12.018>attack. 00:17:12.150 --> 00:17:12.160 align:start position:0% attack. 00:17:12.160 --> 00:17:14.470 align:start position:0% <00:17:12.160>attack. <00:17:12.335>Maybe <00:17:12.510>you <00:17:12.685>know <00:17:12.860>already <00:17:13.035>that <00:17:13.210>you <00:17:13.385>can <00:17:13.560>use 00:17:14.470 --> 00:17:14.480 align:start position:0% <00:17:14.470>Maybe <00:17:14.471>you <00:17:14.472>know <00:17:14.473>already <00:17:14.475>that <00:17:14.476>you <00:17:14.477>can <00:17:14.479>use 00:17:14.480 --> 00:17:17.670 align:start position:0% <00:17:14.480>Maybe <00:17:14.596>you <00:17:14.713>know <00:17:14.829>already <00:17:14.946>that <00:17:15.063>you <00:17:15.180>can <00:17:15.296>use <00:17:15.413>also <00:17:15.530>passkeys <00:17:15.646>throughout <00:17:15.763>Bluetooth. <00:17:15.880>Like 00:17:17.670 --> 00:17:17.680 align:start position:0% <00:17:17.670>also <00:17:17.672>passkeys <00:17:17.674>throughout <00:17:17.676>Bluetooth. <00:17:17.679>Like 00:17:17.680 --> 00:17:19.710 align:start position:0% <00:17:17.680>also <00:17:17.787>passkeys <00:17:17.895>throughout <00:17:18.003>Bluetooth. <00:17:18.110>Like <00:17:18.218>you <00:17:18.326>have <00:17:18.433>on <00:17:18.541>you <00:17:18.649>have <00:17:18.756>a <00:17:18.864>passkey <00:17:18.972>on <00:17:19.080>your 00:17:19.710 --> 00:17:19.720 align:start position:0% <00:17:19.710>you <00:17:19.711>have <00:17:19.712>on <00:17:19.713>you <00:17:19.714>have <00:17:19.715>a <00:17:19.716>passkey <00:17:19.717>on <00:17:19.719>your 00:17:19.720 --> 00:17:22.030 align:start position:0% <00:17:19.720>you <00:17:19.827>have <00:17:19.935>on <00:17:20.043>you <00:17:20.150>have <00:17:20.258>a <00:17:20.366>passkey <00:17:20.473>on <00:17:20.581>your <00:17:20.689>smartphone, <00:17:20.796>it's <00:17:20.904>connected <00:17:21.012>via <00:17:21.120>Bluetooth 00:17:22.030 --> 00:17:22.040 align:start position:0% <00:17:22.030>smartphone, <00:17:22.032>it's <00:17:22.034>connected <00:17:22.036>via <00:17:22.039>Bluetooth 00:17:22.040 --> 00:17:25.510 align:start position:0% <00:17:22.040>smartphone, <00:17:22.147>it's <00:17:22.255>connected <00:17:22.363>via <00:17:22.470>Bluetooth <00:17:22.578>to <00:17:22.686>your <00:17:22.793>PC, <00:17:22.901>and <00:17:23.009>then <00:17:23.116>you <00:17:23.224>log <00:17:23.332>in, <00:17:23.440>and 00:17:25.510 --> 00:17:25.520 align:start position:0% <00:17:25.510>to <00:17:25.511>your <00:17:25.512>PC, <00:17:25.513>and <00:17:25.514>then <00:17:25.515>you <00:17:25.516>log <00:17:25.517>in, <00:17:25.519>and 00:17:25.520 --> 00:17:27.590 align:start position:0% <00:17:25.520>to <00:17:25.613>your <00:17:25.706>PC, <00:17:25.800>and <00:17:25.893>then <00:17:25.986>you <00:17:26.079>log <00:17:26.173>in, <00:17:26.266>and <00:17:26.359>then <00:17:26.453>you <00:17:26.546>can <00:17:26.639>use <00:17:26.733>your <00:17:26.826>passkey <00:17:26.920>Bluetooth 00:17:27.590 --> 00:17:27.600 align:start position:0% <00:17:27.589>then <00:17:27.591>you <00:17:27.592>can <00:17:27.594>use <00:17:27.596>your <00:17:27.597>passkey <00:17:27.598>Bluetooth 00:17:27.600 --> 00:17:30.710 align:start position:0% <00:17:27.599>then <00:17:27.727>you <00:17:27.854>can <00:17:27.981>use <00:17:28.109>your <00:17:28.236>passkey <00:17:28.363>Bluetooth <00:17:28.490>passkey <00:17:28.618>basically <00:17:28.745>from <00:17:28.872>your <00:17:29.000>smartphone. 00:17:30.710 --> 00:17:30.720 align:start position:0% <00:17:30.710>passkey <00:17:30.712>basically <00:17:30.714>from <00:17:30.716>your <00:17:30.719>smartphone. 00:17:30.720 --> 00:17:32.670 align:start position:0% <00:17:30.720>passkey <00:17:30.847>basically <00:17:30.974>from <00:17:31.101>your <00:17:31.229>smartphone. <00:17:31.356>But <00:17:31.483>imagine <00:17:31.610>a <00:17:31.738>scenario, <00:17:31.865>you <00:17:31.992>don't <00:17:32.120>ask 00:17:32.670 --> 00:17:32.680 align:start position:0% <00:17:32.670>But <00:17:32.671>imagine <00:17:32.673>a <00:17:32.674>scenario, <00:17:32.676>you <00:17:32.677>don't <00:17:32.679>ask 00:17:32.680 --> 00:17:34.590 align:start position:0% <00:17:32.680>But <00:17:32.787>imagine <00:17:32.895>a <00:17:33.003>scenario, <00:17:33.110>you <00:17:33.218>don't <00:17:33.326>ask <00:17:33.433>for <00:17:33.541>user <00:17:33.649>verification, <00:17:33.756>and <00:17:33.864>you <00:17:33.972>have <00:17:34.080>your 00:17:34.590 --> 00:17:34.600 align:start position:0% <00:17:34.590>for <00:17:34.591>user <00:17:34.592>verification, <00:17:34.594>and <00:17:34.596>you <00:17:34.597>have <00:17:34.599>your 00:17:34.600 --> 00:17:36.630 align:start position:0% <00:17:34.600>for <00:17:34.716>user <00:17:34.833>verification, <00:17:34.949>and <00:17:35.066>you <00:17:35.183>have <00:17:35.300>your <00:17:35.416>unlocked <00:17:35.533>smartphone <00:17:35.649>maybe <00:17:35.766>in <00:17:35.883>your <00:17:36.000>pocket 00:17:36.630 --> 00:17:36.640 align:start position:0% <00:17:36.630>unlocked <00:17:36.631>smartphone <00:17:36.633>maybe <00:17:36.635>in <00:17:36.637>your <00:17:36.639>pocket 00:17:36.640 --> 00:17:38.910 align:start position:0% <00:17:36.640>unlocked <00:17:36.767>smartphone <00:17:36.894>maybe <00:17:37.021>in <00:17:37.149>your <00:17:37.276>pocket <00:17:37.403>or <00:17:37.530>somewhere <00:17:37.658>laying <00:17:37.785>laying <00:17:37.912>around, <00:17:38.040>and 00:17:38.910 --> 00:17:38.920 align:start position:0% <00:17:38.910>or <00:17:38.911>somewhere <00:17:38.913>laying <00:17:38.915>laying <00:17:38.917>around, <00:17:38.919>and 00:17:38.920 --> 00:17:40.950 align:start position:0% <00:17:38.920>or <00:17:39.095>somewhere <00:17:39.270>laying <00:17:39.445>laying <00:17:39.620>around, <00:17:39.795>and <00:17:39.970>someone <00:17:40.145>passing <00:17:40.320>by 00:17:40.950 --> 00:17:40.960 align:start position:0% <00:17:40.950>someone <00:17:40.954>passing <00:17:40.959>by 00:17:40.960 --> 00:17:43.190 align:start position:0% <00:17:40.960>someone <00:17:41.135>passing <00:17:41.310>by <00:17:41.485>and <00:17:41.660>uh <00:17:41.835>trying <00:17:42.010>to <00:17:42.185>log <00:17:42.360>in, 00:17:43.190 --> 00:17:43.200 align:start position:0% <00:17:43.190>and <00:17:43.191>uh <00:17:43.193>trying <00:17:43.195>to <00:17:43.197>log <00:17:43.199>in, 00:17:43.200 --> 00:17:45.710 align:start position:0% <00:17:43.200>and <00:17:43.307>uh <00:17:43.415>trying <00:17:43.523>to <00:17:43.630>log <00:17:43.738>in, <00:17:43.846>and <00:17:43.953>the <00:17:44.061>website <00:17:44.169>is <00:17:44.276>trying <00:17:44.384>to <00:17:44.492>connect <00:17:44.600>to 00:17:45.710 --> 00:17:45.720 align:start position:0% <00:17:45.710>and <00:17:45.711>the <00:17:45.712>website <00:17:45.713>is <00:17:45.715>trying <00:17:45.716>to <00:17:45.717>connect <00:17:45.719>to 00:17:45.720 --> 00:17:47.590 align:start position:0% <00:17:45.720>and <00:17:45.860>the <00:17:46.000>website <00:17:46.140>is <00:17:46.280>trying <00:17:46.420>to <00:17:46.560>connect <00:17:46.700>to <00:17:46.840>a <00:17:46.980>Bluetooth <00:17:47.120>passkey. 00:17:47.590 --> 00:17:47.600 align:start position:0% <00:17:47.590>a <00:17:47.594>Bluetooth <00:17:47.599>passkey. 00:17:47.600 --> 00:17:49.230 align:start position:0% <00:17:47.600>a <00:17:47.740>Bluetooth <00:17:47.879>passkey. <00:17:48.020>And <00:17:48.159>if <00:17:48.300>the <00:17:48.439>person <00:17:48.580>of <00:17:48.719>course <00:17:48.860>is <00:17:49.000>close 00:17:49.230 --> 00:17:49.240 align:start position:0% <00:17:49.230>And <00:17:49.231>if <00:17:49.232>the <00:17:49.233>person <00:17:49.235>of <00:17:49.236>course <00:17:49.237>is <00:17:49.239>close 00:17:49.240 --> 00:17:52.550 align:start position:0% <00:17:49.240>And <00:17:49.340>if <00:17:49.440>the <00:17:49.540>person <00:17:49.640>of <00:17:49.740>course <00:17:49.840>is <00:17:49.940>close <00:17:50.040>enough <00:17:50.140>close <00:17:50.240>enough <00:17:50.340>to <00:17:50.440>your <00:17:50.540>connected <00:17:50.640>um 00:17:52.550 --> 00:17:52.560 align:start position:0% <00:17:52.550>enough <00:17:52.551>close <00:17:52.553>enough <00:17:52.554>to <00:17:52.556>your <00:17:52.557>connected <00:17:52.559>um 00:17:52.560 --> 00:17:54.190 align:start position:0% <00:17:52.560>enough <00:17:52.735>close <00:17:52.909>enough <00:17:53.085>to <00:17:53.260>your <00:17:53.435>connected <00:17:53.610>um <00:17:53.784>as <00:17:53.960>passkey, 00:17:54.190 --> 00:17:54.200 align:start position:0% <00:17:54.190>as <00:17:54.199>passkey, 00:17:54.200 --> 00:17:56.070 align:start position:0% <00:17:54.200>as <00:17:54.355>passkey, <00:17:54.511>then <00:17:54.666>it <00:17:54.822>will <00:17:54.977>use <00:17:55.133>this <00:17:55.288>kind <00:17:55.444>of <00:17:55.600>passkey 00:17:56.070 --> 00:17:56.080 align:start position:0% <00:17:56.070>then <00:17:56.071>it <00:17:56.072>will <00:17:56.073>use <00:17:56.075>this <00:17:56.076>kind <00:17:56.077>of <00:17:56.079>passkey 00:17:56.080 --> 00:17:57.750 align:start position:0% <00:17:56.080>then <00:17:56.196>it <00:17:56.313>will <00:17:56.429>use <00:17:56.546>this <00:17:56.663>kind <00:17:56.780>of <00:17:56.896>passkey <00:17:57.013>without <00:17:57.129>asking <00:17:57.246>for <00:17:57.363>another <00:17:57.480>user 00:17:57.750 --> 00:17:57.760 align:start position:0% <00:17:57.750>without <00:17:57.752>asking <00:17:57.754>for <00:17:57.756>another <00:17:57.759>user 00:17:57.760 --> 00:18:00.710 align:start position:0% <00:17:57.760>without <00:17:57.915>asking <00:17:58.071>for <00:17:58.226>another <00:17:58.382>user <00:17:58.537>verification. <00:17:58.693>So, <00:17:58.848>please <00:17:59.004>always <00:17:59.160>uh 00:18:00.710 --> 00:18:00.720 align:start position:0% <00:18:00.710>verification. <00:18:00.712>So, <00:18:00.714>please <00:18:00.716>always <00:18:00.719>uh 00:18:00.720 --> 00:18:03.590 align:start position:0% <00:18:00.720>verification. <00:18:00.847>So, <00:18:00.974>please <00:18:01.101>always <00:18:01.229>uh <00:18:01.356>enable <00:18:01.483>that. <00:18:01.610>Here <00:18:01.738>for <00:18:01.865>instance, <00:18:01.992>you <00:18:02.120>find 00:18:03.590 --> 00:18:03.600 align:start position:0% <00:18:03.590>enable <00:18:03.591>that. <00:18:03.592>Here <00:18:03.594>for <00:18:03.596>instance, <00:18:03.597>you <00:18:03.599>find 00:18:03.600 --> 00:18:06.270 align:start position:0% <00:18:03.600>enable <00:18:03.716>that. <00:18:03.833>Here <00:18:03.949>for <00:18:04.066>instance, <00:18:04.183>you <00:18:04.300>find <00:18:04.416>that <00:18:04.533>um <00:18:04.649>over <00:18:04.766>here, <00:18:04.883>user <00:18:05.000>verification 00:18:06.270 --> 00:18:06.280 align:start position:0% <00:18:06.270>that <00:18:06.271>um <00:18:06.273>over <00:18:06.275>here, <00:18:06.277>user <00:18:06.279>verification 00:18:06.280 --> 00:18:08.350 align:start position:0% <00:18:06.280>that <00:18:06.480>um <00:18:06.680>over <00:18:06.879>here, <00:18:07.080>user <00:18:07.280>verification <00:18:07.480>requirement. <00:18:07.680>Um 00:18:08.350 --> 00:18:08.360 align:start position:0% <00:18:08.350>requirement. <00:18:08.359>Um 00:18:08.360 --> 00:18:10.310 align:start position:0% <00:18:08.360>requirement. <00:18:08.515>Um <00:18:08.671>of <00:18:08.826>course, <00:18:08.982>you <00:18:09.137>might <00:18:09.293>could <00:18:09.448>ask, <00:18:09.604>why <00:18:09.760>is 00:18:10.310 --> 00:18:10.320 align:start position:0% <00:18:10.310>of <00:18:10.311>course, <00:18:10.312>you <00:18:10.313>might <00:18:10.315>could <00:18:10.316>ask, <00:18:10.317>why <00:18:10.319>is 00:18:10.320 --> 00:18:12.910 align:start position:0% <00:18:10.320>of <00:18:10.419>course, <00:18:10.520>you <00:18:10.620>might <00:18:10.720>could <00:18:10.820>ask, <00:18:10.919>why <00:18:11.020>is <00:18:11.120>this <00:18:11.220>not <00:18:11.320>default <00:18:11.419>like <00:18:11.520>by <00:18:11.620>default <00:18:11.720>just 00:18:12.910 --> 00:18:12.920 align:start position:0% <00:18:12.910>this <00:18:12.911>not <00:18:12.913>default <00:18:12.914>like <00:18:12.916>by <00:18:12.917>default <00:18:12.919>just 00:18:12.920 --> 00:18:15.830 align:start position:0% <00:18:12.920>this <00:18:13.027>not <00:18:13.135>default <00:18:13.243>like <00:18:13.350>by <00:18:13.458>default <00:18:13.566>just <00:18:13.673>required? <00:18:13.781>There <00:18:13.889>are <00:18:13.996>cases <00:18:14.104>or <00:18:14.212>there <00:18:14.320>were 00:18:15.830 --> 00:18:15.840 align:start position:0% <00:18:15.830>required? <00:18:15.831>There <00:18:15.832>are <00:18:15.834>cases <00:18:15.836>or <00:18:15.837>there <00:18:15.839>were 00:18:15.840 --> 00:18:18.350 align:start position:0% <00:18:15.840>required? <00:18:15.939>There <00:18:16.040>are <00:18:16.139>cases <00:18:16.240>or <00:18:16.340>there <00:18:16.439>were <00:18:16.540>some <00:18:16.639>cases <00:18:16.740>where <00:18:16.840>passkeys <00:18:16.939>are <00:18:17.040>used <00:18:17.139>as <00:18:17.240>a 00:18:18.350 --> 00:18:18.360 align:start position:0% <00:18:18.350>some <00:18:18.351>cases <00:18:18.352>where <00:18:18.353>passkeys <00:18:18.355>are <00:18:18.356>used <00:18:18.357>as <00:18:18.359>a 00:18:18.360 --> 00:18:20.910 align:start position:0% <00:18:18.360>some <00:18:18.515>cases <00:18:18.671>where <00:18:18.826>passkeys <00:18:18.982>are <00:18:19.137>used <00:18:19.293>as <00:18:19.448>a <00:18:19.604>second <00:18:19.760>factor. 00:18:20.910 --> 00:18:20.920 align:start position:0% <00:18:20.910>second <00:18:20.919>factor. 00:18:20.920 --> 00:18:22.830 align:start position:0% <00:18:20.920>second <00:18:21.095>factor. <00:18:21.270>So, <00:18:21.445>it's <00:18:21.620>a <00:18:21.795>little <00:18:21.970>bit <00:18:22.145>annoying <00:18:22.320>having 00:18:22.830 --> 00:18:22.840 align:start position:0% <00:18:22.830>So, <00:18:22.831>it's <00:18:22.832>a <00:18:22.834>little <00:18:22.836>bit <00:18:22.837>annoying <00:18:22.839>having 00:18:22.840 --> 00:18:24.630 align:start position:0% <00:18:22.840>So, <00:18:22.947>it's <00:18:23.055>a <00:18:23.163>little <00:18:23.270>bit <00:18:23.378>annoying <00:18:23.486>having <00:18:23.593>username <00:18:23.701>password <00:18:23.809>and <00:18:23.916>then <00:18:24.024>passkeys <00:18:24.132>as <00:18:24.240>a 00:18:24.630 --> 00:18:24.640 align:start position:0% <00:18:24.630>username <00:18:24.631>password <00:18:24.633>and <00:18:24.634>then <00:18:24.636>passkeys <00:18:24.637>as <00:18:24.639>a 00:18:24.640 --> 00:18:26.350 align:start position:0% <00:18:24.640>username <00:18:24.756>password <00:18:24.873>and <00:18:24.990>then <00:18:25.106>passkeys <00:18:25.223>as <00:18:25.340>a <00:18:25.456>second <00:18:25.573>factor <00:18:25.690>and <00:18:25.806>having <00:18:25.923>this <00:18:26.040>user 00:18:26.350 --> 00:18:26.360 align:start position:0% <00:18:26.350>second <00:18:26.351>factor <00:18:26.353>and <00:18:26.355>having <00:18:26.357>this <00:18:26.359>user 00:18:26.360 --> 00:18:27.910 align:start position:0% <00:18:26.360>second <00:18:26.592>factor <00:18:26.825>and <00:18:27.057>having <00:18:27.290>this <00:18:27.522>user <00:18:27.755>verification. 00:18:27.910 --> 00:18:27.920 align:start position:0% verification. 00:18:27.920 --> 00:18:29.910 align:start position:0% <00:18:27.920>verification. <00:18:28.620>Um <00:18:29.320>basically, 00:18:29.910 --> 00:18:29.920 align:start position:0% <00:18:29.910>Um <00:18:29.919>basically, 00:18:29.920 --> 00:18:33.030 align:start position:0% <00:18:29.920>Um <00:18:30.075>basically, <00:18:30.231>um <00:18:30.386>so, <00:18:30.542>that's <00:18:30.697>why <00:18:30.853>there <00:18:31.008>is <00:18:31.164>a <00:18:31.320>possibility 00:18:33.030 --> 00:18:33.040 align:start position:0% <00:18:33.030>um <00:18:33.031>so, <00:18:33.032>that's <00:18:33.033>why <00:18:33.035>there <00:18:33.036>is <00:18:33.037>a <00:18:33.039>possibility 00:18:33.040 --> 00:18:35.230 align:start position:0% <00:18:33.040>um <00:18:33.133>so, <00:18:33.226>that's <00:18:33.320>why <00:18:33.413>there <00:18:33.506>is <00:18:33.600>a <00:18:33.693>possibility <00:18:33.786>on <00:18:33.879>a <00:18:33.973>specification <00:18:34.066>to <00:18:34.159>turn <00:18:34.253>it <00:18:34.346>off. <00:18:34.440>But 00:18:35.230 --> 00:18:35.240 align:start position:0% <00:18:35.230>on <00:18:35.231>a <00:18:35.232>specification <00:18:35.233>to <00:18:35.235>turn <00:18:35.236>it <00:18:35.237>off. <00:18:35.239>But 00:18:35.240 --> 00:18:37.550 align:start position:0% <00:18:35.240>on <00:18:35.356>a <00:18:35.473>specification <00:18:35.590>to <00:18:35.706>turn <00:18:35.823>it <00:18:35.940>off. <00:18:36.056>But <00:18:36.173>if <00:18:36.290>you <00:18:36.406>have <00:18:36.523>passkey <00:18:36.640>only, 00:18:37.550 --> 00:18:37.560 align:start position:0% <00:18:37.550>if <00:18:37.552>you <00:18:37.554>have <00:18:37.556>passkey <00:18:37.559>only, 00:18:37.560 --> 00:18:39.630 align:start position:0% <00:18:37.560>if <00:18:37.676>you <00:18:37.793>have <00:18:37.909>passkey <00:18:38.026>only, <00:18:38.143>um <00:18:38.260>then <00:18:38.376>I <00:18:38.493>highly <00:18:38.610>recommend <00:18:38.726>to <00:18:38.843>just <00:18:38.960>of 00:18:39.630 --> 00:18:39.640 align:start position:0% <00:18:39.630>um <00:18:39.631>then <00:18:39.632>I <00:18:39.633>highly <00:18:39.635>recommend <00:18:39.636>to <00:18:39.637>just <00:18:39.639>of 00:18:39.640 --> 00:18:41.990 align:start position:0% <00:18:39.640>um <00:18:39.747>then <00:18:39.855>I <00:18:39.963>highly <00:18:40.070>recommend <00:18:40.178>to <00:18:40.286>just <00:18:40.393>of <00:18:40.501>course <00:18:40.609>having <00:18:40.716>this <00:18:40.824>as <00:18:40.932>a <00:18:41.040>requirement, 00:18:41.990 --> 00:18:42.000 align:start position:0% <00:18:41.990>course <00:18:41.991>having <00:18:41.993>this <00:18:41.995>as <00:18:41.997>a <00:18:41.999>requirement, 00:18:42.000 --> 00:18:45.830 align:start position:0% <00:18:42.000>course <00:18:42.107>having <00:18:42.215>this <00:18:42.323>as <00:18:42.430>a <00:18:42.538>requirement, <00:18:42.646>which <00:18:42.753>I <00:18:42.861>think <00:18:42.969>makes <00:18:43.076>a <00:18:43.184>lot <00:18:43.292>of <00:18:43.400>sense. 00:18:45.830 --> 00:18:45.840 align:start position:0% <00:18:45.830>which <00:18:45.831>I <00:18:45.832>think <00:18:45.833>makes <00:18:45.835>a <00:18:45.836>lot <00:18:45.837>of <00:18:45.839>sense. 00:18:45.840 --> 00:18:48.270 align:start position:0% <00:18:45.840>which <00:18:46.014>I <00:18:46.189>think <00:18:46.365>makes <00:18:46.540>a <00:18:46.715>lot <00:18:46.889>of <00:18:47.064>sense. <00:18:47.240>Attestation. 00:18:48.270 --> 00:18:48.280 align:start position:0% Attestation. 00:18:48.280 --> 00:18:49.870 align:start position:0% <00:18:48.280>Attestation. <00:18:48.980>If <00:18:49.680>you 00:18:49.870 --> 00:18:49.880 align:start position:0% <00:18:49.870>If <00:18:49.879>you 00:18:49.880 --> 00:18:52.990 align:start position:0% <00:18:49.880>If <00:18:50.055>you <00:18:50.230>enable <00:18:50.405>passkeys, <00:18:50.580>you <00:18:50.755>need <00:18:50.930>to <00:18:51.105>the <00:18:51.280>server 00:18:52.990 --> 00:18:53.000 align:start position:0% <00:18:52.990>enable <00:18:52.991>passkeys, <00:18:52.993>you <00:18:52.994>need <00:18:52.996>to <00:18:52.997>the <00:18:52.999>server 00:18:53.000 --> 00:18:55.750 align:start position:0% <00:18:53.000>enable <00:18:53.100>passkeys, <00:18:53.200>you <00:18:53.300>need <00:18:53.400>to <00:18:53.500>the <00:18:53.600>server <00:18:53.700>Keycloak <00:18:53.800>or <00:18:53.900>the <00:18:54.000>IDP <00:18:54.100>or <00:18:54.200>whatnot <00:18:54.300>need <00:18:54.400>to 00:18:55.750 --> 00:18:55.760 align:start position:0% <00:18:55.750>Keycloak <00:18:55.751>or <00:18:55.752>the <00:18:55.753>IDP <00:18:55.755>or <00:18:55.756>whatnot <00:18:55.757>need <00:18:55.759>to 00:18:55.760 --> 00:18:58.510 align:start position:0% <00:18:55.760>Keycloak <00:18:55.867>or <00:18:55.975>the <00:18:56.083>IDP <00:18:56.190>or <00:18:56.298>whatnot <00:18:56.406>need <00:18:56.513>to <00:18:56.621>evaluate <00:18:56.729>the <00:18:56.836>attestation. <00:18:56.944>What <00:18:57.052>is <00:18:57.160>of 00:18:58.510 --> 00:18:58.520 align:start position:0% <00:18:58.510>evaluate <00:18:58.511>the <00:18:58.513>attestation. <00:18:58.515>What <00:18:58.517>is <00:18:58.519>of 00:18:58.520 --> 00:18:59.950 align:start position:0% <00:18:58.520>evaluate <00:18:58.648>the <00:18:58.777>attestation. <00:18:58.906>What <00:18:59.034>is <00:18:59.163>of <00:18:59.292>course <00:18:59.420>what <00:18:59.549>is <00:18:59.678>the <00:18:59.807>attestation 00:18:59.950 --> 00:18:59.960 align:start position:0% <00:18:59.950>course <00:18:59.952>what <00:18:59.954>is <00:18:59.956>the <00:18:59.959>attestation 00:18:59.960 --> 00:19:01.350 align:start position:0% <00:18:59.960>course <00:19:00.210>what <00:19:00.460>is <00:19:00.710>the <00:19:00.960>attestation <00:19:01.211>basically? 00:19:01.350 --> 00:19:01.360 align:start position:0% basically? 00:19:01.360 --> 00:19:05.310 align:start position:0% <00:19:01.360>basically? <00:19:01.534>Um <00:19:01.709>it's <00:19:01.885>also <00:19:02.060>again <00:19:02.235>a <00:19:02.409>JSON <00:19:02.584>object, <00:19:02.760>which 00:19:05.310 --> 00:19:05.320 align:start position:0% <00:19:05.310>Um <00:19:05.311>it's <00:19:05.312>also <00:19:05.313>again <00:19:05.315>a <00:19:05.316>JSON <00:19:05.317>object, <00:19:05.319>which 00:19:05.320 --> 00:19:08.830 align:start position:0% <00:19:05.320>Um <00:19:05.427>it's <00:19:05.535>also <00:19:05.643>again <00:19:05.750>a <00:19:05.858>JSON <00:19:05.966>object, <00:19:06.073>which <00:19:06.181>the <00:19:06.289>authenticator <00:19:06.396>sends <00:19:06.504>over <00:19:06.612>to <00:19:06.720>the 00:19:08.830 --> 00:19:08.840 align:start position:0% <00:19:08.830>the <00:19:08.831>authenticator <00:19:08.833>sends <00:19:08.835>over <00:19:08.837>to <00:19:08.839>the 00:19:08.840 --> 00:19:10.990 align:start position:0% <00:19:08.840>the <00:19:08.967>authenticator <00:19:09.094>sends <00:19:09.221>over <00:19:09.349>to <00:19:09.476>the <00:19:09.603>client <00:19:09.730>and <00:19:09.858>then <00:19:09.985>towards <00:19:10.112>the <00:19:10.240>server 00:19:10.990 --> 00:19:11.000 align:start position:0% <00:19:10.990>client <00:19:10.991>and <00:19:10.993>then <00:19:10.995>towards <00:19:10.997>the <00:19:10.999>server 00:19:11.000 --> 00:19:14.470 align:start position:0% <00:19:11.000>client <00:19:11.155>and <00:19:11.311>then <00:19:11.466>towards <00:19:11.622>the <00:19:11.777>server <00:19:11.933>giving <00:19:12.088>information <00:19:12.244>about <00:19:12.400>authenticator. 00:19:14.470 --> 00:19:14.480 align:start position:0% <00:19:14.470>giving <00:19:14.473>information <00:19:14.476>about <00:19:14.479>authenticator. 00:19:14.480 --> 00:19:16.350 align:start position:0% <00:19:14.480>giving <00:19:14.620>information <00:19:14.760>about <00:19:14.900>authenticator. <00:19:15.040>For <00:19:15.180>instance, <00:19:15.320>we <00:19:15.460>find <00:19:15.600>the <00:19:15.740>format <00:19:15.880>over 00:19:16.350 --> 00:19:16.360 align:start position:0% <00:19:16.350>For <00:19:16.351>instance, <00:19:16.352>we <00:19:16.354>find <00:19:16.356>the <00:19:16.357>format <00:19:16.359>over 00:19:16.360 --> 00:19:17.510 align:start position:0% <00:19:16.360>For <00:19:16.507>instance, <00:19:16.655>we <00:19:16.803>find <00:19:16.951>the <00:19:17.099>format <00:19:17.247>over <00:19:17.395>here. 00:19:17.510 --> 00:19:17.520 align:start position:0% here. 00:19:17.520 --> 00:19:19.710 align:start position:0% <00:19:17.520>here. <00:19:17.870>The <00:19:18.220>format <00:19:18.570>is <00:19:18.920>basically 00:19:19.710 --> 00:19:19.720 align:start position:0% <00:19:19.710>The <00:19:19.713>format <00:19:19.716>is <00:19:19.719>basically 00:19:19.720 --> 00:19:22.390 align:start position:0% <00:19:19.720>The <00:19:19.920>format <00:19:20.120>is <00:19:20.320>basically <00:19:20.520>unfortunately <00:19:20.720>completely <00:19:20.920>different <00:19:21.120>for 00:19:22.390 --> 00:19:22.400 align:start position:0% <00:19:22.390>unfortunately <00:19:22.393>completely <00:19:22.396>different <00:19:22.399>for 00:19:22.400 --> 00:19:23.910 align:start position:0% <00:19:22.400>unfortunately <00:19:22.551>completely <00:19:22.702>different <00:19:22.853>for <00:19:23.004>all <00:19:23.155>of <00:19:23.306>the <00:19:23.457>authenticators <00:19:23.608>we <00:19:23.759>know, 00:19:23.910 --> 00:19:23.920 align:start position:0% <00:19:23.910>all <00:19:23.911>of <00:19:23.913>the <00:19:23.915>authenticators <00:19:23.917>we <00:19:23.919>know, 00:19:23.920 --> 00:19:25.350 align:start position:0% <00:19:23.920>all <00:19:24.027>of <00:19:24.134>the <00:19:24.241>authenticators <00:19:24.349>we <00:19:24.456>know, <00:19:24.563>because <00:19:24.670>there <00:19:24.778>is <00:19:24.885>there <00:19:24.992>is <00:19:25.099>no <00:19:25.206>really 00:19:25.350 --> 00:19:25.360 align:start position:0% <00:19:25.350>because <00:19:25.351>there <00:19:25.352>is <00:19:25.354>there <00:19:25.356>is <00:19:25.357>no <00:19:25.359>really 00:19:25.360 --> 00:19:29.830 align:start position:0% <00:19:25.360>because <00:19:25.467>there <00:19:25.575>is <00:19:25.683>there <00:19:25.790>is <00:19:25.898>no <00:19:26.006>really <00:19:26.113>standard. <00:19:26.221>So, <00:19:26.329>it's <00:19:26.436>basically <00:19:26.544>um <00:19:26.652>how <00:19:26.760>um 00:19:29.830 --> 00:19:29.840 align:start position:0% <00:19:29.830>standard. <00:19:29.831>So, <00:19:29.832>it's <00:19:29.834>basically <00:19:29.836>um <00:19:29.837>how <00:19:29.839>um 00:19:29.840 --> 00:19:32.630 align:start position:0% <00:19:29.840>standard. <00:19:29.947>So, <00:19:30.055>it's <00:19:30.163>basically <00:19:30.270>um <00:19:30.378>how <00:19:30.486>um <00:19:30.593>how <00:19:30.701>the <00:19:30.809>attestation <00:19:30.916>looks <00:19:31.024>like, <00:19:31.132>where <00:19:31.240>to 00:19:32.630 --> 00:19:32.640 align:start position:0% <00:19:32.630>how <00:19:32.631>the <00:19:32.633>attestation <00:19:32.634>looks <00:19:32.636>like, <00:19:32.637>where <00:19:32.639>to 00:19:32.640 --> 00:19:34.790 align:start position:0% <00:19:32.640>how <00:19:32.756>the <00:19:32.873>attestation <00:19:32.990>looks <00:19:33.106>like, <00:19:33.223>where <00:19:33.340>to <00:19:33.456>find <00:19:33.573>fields, <00:19:33.690>where <00:19:33.806>to <00:19:33.923>find <00:19:34.040>the 00:19:34.790 --> 00:19:34.800 align:start position:0% <00:19:34.790>find <00:19:34.791>fields, <00:19:34.793>where <00:19:34.795>to <00:19:34.797>find <00:19:34.799>the 00:19:34.800 --> 00:19:37.070 align:start position:0% <00:19:34.800>find <00:19:34.940>fields, <00:19:35.080>where <00:19:35.220>to <00:19:35.360>find <00:19:35.500>the <00:19:35.639>certificate, <00:19:35.780>where <00:19:35.919>to <00:19:36.060>find <00:19:36.200>the 00:19:37.070 --> 00:19:37.080 align:start position:0% <00:19:37.070>certificate, <00:19:37.072>where <00:19:37.074>to <00:19:37.076>find <00:19:37.079>the 00:19:37.080 --> 00:19:39.950 align:start position:0% <00:19:37.080>certificate, <00:19:37.207>where <00:19:37.334>to <00:19:37.461>find <00:19:37.589>the <00:19:37.716>signature <00:19:37.843>and <00:19:37.970>whatnot. <00:19:38.098>Um <00:19:38.225>so, <00:19:38.352>the <00:19:38.480>whole 00:19:39.950 --> 00:19:39.960 align:start position:0% <00:19:39.950>signature <00:19:39.951>and <00:19:39.953>whatnot. <00:19:39.954>Um <00:19:39.956>so, <00:19:39.957>the <00:19:39.959>whole 00:19:39.960 --> 00:19:42.630 align:start position:0% <00:19:39.960>signature <00:19:40.076>and <00:19:40.193>whatnot. <00:19:40.310>Um <00:19:40.426>so, <00:19:40.543>the <00:19:40.660>whole <00:19:40.776>JSON <00:19:40.893>could <00:19:41.010>look <00:19:41.126>differently <00:19:41.243>um <00:19:41.360>when 00:19:42.630 --> 00:19:42.640 align:start position:0% <00:19:42.630>JSON <00:19:42.631>could <00:19:42.633>look <00:19:42.635>differently <00:19:42.637>um <00:19:42.639>when 00:19:42.640 --> 00:19:44.110 align:start position:0% <00:19:42.640>JSON <00:19:42.760>could <00:19:42.880>look <00:19:43.000>differently <00:19:43.121>um <00:19:43.241>when <00:19:43.361>we're <00:19:43.481>having <00:19:43.602>it <00:19:43.722>from <00:19:43.842>an <00:19:43.963>Android's 00:19:44.110 --> 00:19:44.120 align:start position:0% <00:19:44.110>we're <00:19:44.111>having <00:19:44.113>it <00:19:44.115>from <00:19:44.117>an <00:19:44.119>Android's 00:19:44.120 --> 00:19:46.430 align:start position:0% <00:19:44.120>we're <00:19:44.260>having <00:19:44.399>it <00:19:44.540>from <00:19:44.679>an <00:19:44.820>Android's <00:19:44.959>authenticator <00:19:45.100>or <00:19:45.239>iCloud <00:19:45.379>Keychain <00:19:45.520>or 00:19:46.430 --> 00:19:46.440 align:start position:0% <00:19:46.430>authenticator <00:19:46.432>or <00:19:46.434>iCloud <00:19:46.436>Keychain <00:19:46.439>or 00:19:46.440 --> 00:19:48.830 align:start position:0% <00:19:46.440>authenticator <00:19:46.720>or <00:19:47.000>iCloud <00:19:47.280>Keychain <00:19:47.560>or <00:19:47.840>whatnot. 00:19:48.830 --> 00:19:48.840 align:start position:0% whatnot. 00:19:48.840 --> 00:19:50.110 align:start position:0% <00:19:48.840>whatnot. <00:19:49.983>So, 00:19:50.110 --> 00:19:50.120 align:start position:0% So, 00:19:50.120 --> 00:19:53.070 align:start position:0% <00:19:50.120>So, <00:19:50.320>because <00:19:50.520>the <00:19:50.719>second <00:19:50.919>thing <00:19:51.120>um <00:19:51.320>the <00:19:51.520>the 00:19:53.070 --> 00:19:53.080 align:start position:0% <00:19:53.070>because <00:19:53.071>the <00:19:53.072>second <00:19:53.074>thing <00:19:53.076>um <00:19:53.077>the <00:19:53.079>the 00:19:53.080 --> 00:19:55.710 align:start position:0% <00:19:53.080>because <00:19:53.179>the <00:19:53.280>second <00:19:53.379>thing <00:19:53.480>um <00:19:53.580>the <00:19:53.679>the <00:19:53.780>monitor <00:19:53.879>got <00:19:53.980>off, <00:19:54.080>just <00:19:54.179>to <00:19:54.280>say <00:19:54.379>that <00:19:54.480>this 00:19:55.710 --> 00:19:55.720 align:start position:0% <00:19:55.710>monitor <00:19:55.711>got <00:19:55.712>off, <00:19:55.713>just <00:19:55.715>to <00:19:55.716>say <00:19:55.717>that <00:19:55.719>this 00:19:55.720 --> 00:19:57.270 align:start position:0% <00:19:55.720>monitor <00:19:55.859>got <00:19:55.999>off, <00:19:56.138>just <00:19:56.278>to <00:19:56.417>say <00:19:56.557>that <00:19:56.696>this <00:19:56.836>monitor <00:19:56.975>got <00:19:57.115>off. 00:19:57.270 --> 00:19:57.280 align:start position:0% <00:19:57.270>monitor <00:19:57.274>got <00:19:57.279>off. 00:19:57.280 --> 00:20:00.550 align:start position:0% <00:19:57.280>monitor <00:19:57.420>got <00:19:57.560>off. <00:19:57.700>All <00:19:57.840>good? <00:19:57.980>Um <00:19:58.120>but <00:19:58.260>the <00:19:58.399>picture <00:19:58.540>is <00:19:58.680>still 00:20:00.550 --> 00:20:00.560 align:start position:0% <00:20:00.550>All <00:20:00.551>good? <00:20:00.552>Um <00:20:00.553>but <00:20:00.555>the <00:20:00.556>picture <00:20:00.557>is <00:20:00.559>still 00:20:00.560 --> 00:20:03.030 align:start position:0% <00:20:00.560>All <00:20:00.653>good? <00:20:00.746>Um <00:20:00.840>but <00:20:00.933>the <00:20:01.026>picture <00:20:01.120>is <00:20:01.213>still <00:20:01.306>there, <00:20:01.399>so <00:20:01.493>I'm <00:20:01.586>good. <00:20:01.679>Um <00:20:01.773>in <00:20:01.866>the <00:20:01.960>general, 00:20:03.030 --> 00:20:03.040 align:start position:0% <00:20:03.030>there, <00:20:03.031>so <00:20:03.032>I'm <00:20:03.033>good. <00:20:03.035>Um <00:20:03.036>in <00:20:03.037>the <00:20:03.039>general, 00:20:03.040 --> 00:20:04.310 align:start position:0% <00:20:03.040>there, <00:20:03.167>so <00:20:03.293>I'm <00:20:03.421>good. <00:20:03.548>Um <00:20:03.675>in <00:20:03.802>the <00:20:03.928>general, <00:20:04.056>I'm <00:20:04.183>good. 00:20:04.310 --> 00:20:04.320 align:start position:0% <00:20:04.310>I'm <00:20:04.319>good. 00:20:04.320 --> 00:20:06.550 align:start position:0% <00:20:04.320>I'm <00:20:04.460>good. <00:20:04.600>Um <00:20:04.740>so, <00:20:04.879>I <00:20:05.020>don't <00:20:05.159>know <00:20:05.300>the <00:20:05.439>time <00:20:05.580>anymore, <00:20:05.720>so 00:20:06.550 --> 00:20:06.560 align:start position:0% <00:20:06.550>Um <00:20:06.551>so, <00:20:06.552>I <00:20:06.553>don't <00:20:06.554>know <00:20:06.555>the <00:20:06.556>time <00:20:06.557>anymore, <00:20:06.559>so 00:20:06.560 --> 00:20:08.470 align:start position:0% <00:20:06.560>Um <00:20:06.647>so, <00:20:06.735>I <00:20:06.822>don't <00:20:06.909>know <00:20:06.997>the <00:20:07.085>time <00:20:07.172>anymore, <00:20:07.260>so <00:20:07.347>I <00:20:07.435>pretend <00:20:07.522>I <00:20:07.610>can <00:20:07.697>just <00:20:07.784>keep <00:20:07.872>talking <00:20:07.960>for 00:20:08.470 --> 00:20:08.480 align:start position:0% <00:20:08.470>I <00:20:08.471>pretend <00:20:08.472>I <00:20:08.473>can <00:20:08.475>just <00:20:08.476>keep <00:20:08.477>talking <00:20:08.479>for 00:20:08.480 --> 00:20:11.310 align:start position:0% <00:20:08.480>I <00:20:08.573>pretend <00:20:08.666>I <00:20:08.760>can <00:20:08.853>just <00:20:08.946>keep <00:20:09.040>talking <00:20:09.133>for <00:20:09.226>half <00:20:09.320>an <00:20:09.413>hour <00:20:09.506>more, <00:20:09.600>so <00:20:09.693>that's <00:20:09.786>fine. <00:20:09.880>Um 00:20:11.310 --> 00:20:11.320 align:start position:0% <00:20:11.310>half <00:20:11.311>an <00:20:11.312>hour <00:20:11.313>more, <00:20:11.315>so <00:20:11.316>that's <00:20:11.317>fine. <00:20:11.319>Um 00:20:11.320 --> 00:20:13.070 align:start position:0% <00:20:11.320>half <00:20:11.475>an <00:20:11.631>hour <00:20:11.786>more, <00:20:11.942>so <00:20:12.097>that's <00:20:12.253>fine. <00:20:12.408>Um <00:20:12.564>just <00:20:12.720>kidding. 00:20:13.070 --> 00:20:13.080 align:start position:0% <00:20:13.070>just <00:20:13.079>kidding. 00:20:13.080 --> 00:20:15.550 align:start position:0% <00:20:13.080>just <00:20:13.220>kidding. <00:20:13.360>So, <00:20:13.500>what <00:20:13.639>we <00:20:13.780>want <00:20:13.919>to <00:20:14.060>Thank <00:20:14.199>you. <00:20:14.340>What <00:20:14.480>we 00:20:15.550 --> 00:20:15.560 align:start position:0% <00:20:15.550>So, <00:20:15.551>what <00:20:15.552>we <00:20:15.553>want <00:20:15.554>to <00:20:15.555>Thank <00:20:15.556>you. <00:20:15.557>What <00:20:15.559>we 00:20:15.560 --> 00:20:17.950 align:start position:0% <00:20:15.560>So, <00:20:15.667>what <00:20:15.775>we <00:20:15.883>want <00:20:15.990>to <00:20:16.098>Thank <00:20:16.206>you. <00:20:16.313>What <00:20:16.421>we <00:20:16.529>want <00:20:16.636>to <00:20:16.744>know <00:20:16.852>is <00:20:16.960>um 00:20:17.950 --> 00:20:17.960 align:start position:0% <00:20:17.950>want <00:20:17.952>to <00:20:17.954>know <00:20:17.956>is <00:20:17.959>um 00:20:17.960 --> 00:20:20.830 align:start position:0% <00:20:17.960>want <00:20:18.100>to <00:20:18.240>know <00:20:18.380>is <00:20:18.520>um <00:20:18.660>if <00:20:18.800>this <00:20:18.940>is <00:20:19.080>an <00:20:19.220>authentic <00:20:19.360>authenticator. 00:20:20.830 --> 00:20:20.840 align:start position:0% <00:20:20.830>if <00:20:20.831>this <00:20:20.833>is <00:20:20.835>an <00:20:20.837>authentic <00:20:20.839>authenticator. 00:20:20.840 --> 00:20:22.390 align:start position:0% <00:20:20.840>if <00:20:20.966>this <00:20:21.093>is <00:20:21.220>an <00:20:21.347>authentic <00:20:21.474>authenticator. <00:20:21.600>So, <00:20:21.727>we <00:20:21.854>find <00:20:21.981>something <00:20:22.108>that's <00:20:22.235>called 00:20:22.390 --> 00:20:22.400 align:start position:0% <00:20:22.390>So, <00:20:22.391>we <00:20:22.393>find <00:20:22.395>something <00:20:22.397>that's <00:20:22.399>called 00:20:22.400 --> 00:20:25.430 align:start position:0% <00:20:22.400>So, <00:20:22.555>we <00:20:22.711>find <00:20:22.866>something <00:20:23.022>that's <00:20:23.177>called <00:20:23.333>attestation <00:20:23.488>statement <00:20:23.644>beneath <00:20:23.800>here. 00:20:25.430 --> 00:20:25.440 align:start position:0% <00:20:25.430>attestation <00:20:25.433>statement <00:20:25.436>beneath <00:20:25.439>here. 00:20:25.440 --> 00:20:28.230 align:start position:0% <00:20:25.440>attestation <00:20:25.595>statement <00:20:25.751>beneath <00:20:25.906>here. <00:20:26.062>There's <00:20:26.217>basically <00:20:26.373>the <00:20:26.528>algorithm, <00:20:26.684>how <00:20:26.840>was 00:20:28.230 --> 00:20:28.240 align:start position:0% <00:20:28.230>There's <00:20:28.231>basically <00:20:28.233>the <00:20:28.235>algorithm, <00:20:28.237>how <00:20:28.239>was 00:20:28.240 --> 00:20:30.390 align:start position:0% <00:20:28.240>There's <00:20:28.380>basically <00:20:28.520>the <00:20:28.660>algorithm, <00:20:28.800>how <00:20:28.940>was <00:20:29.080>the <00:20:29.220>signature <00:20:29.360>created. <00:20:29.500>So, <00:20:29.640>the 00:20:30.390 --> 00:20:30.400 align:start position:0% <00:20:30.390>the <00:20:30.392>signature <00:20:30.394>created. <00:20:30.396>So, <00:20:30.399>the 00:20:30.400 --> 00:20:32.710 align:start position:0% <00:20:30.400>the <00:20:30.540>signature <00:20:30.680>created. <00:20:30.820>So, <00:20:30.960>the <00:20:31.100>authenticator, <00:20:31.240>of <00:20:31.380>course, <00:20:31.520>needed <00:20:31.660>to <00:20:31.800>sign 00:20:32.710 --> 00:20:32.720 align:start position:0% <00:20:32.710>authenticator, <00:20:32.711>of <00:20:32.713>course, <00:20:32.715>needed <00:20:32.717>to <00:20:32.719>sign 00:20:32.720 --> 00:20:35.830 align:start position:0% <00:20:32.720>authenticator, <00:20:32.847>of <00:20:32.974>course, <00:20:33.101>needed <00:20:33.229>to <00:20:33.356>sign <00:20:33.483>with <00:20:33.610>its <00:20:33.738>uh <00:20:33.865>firmware <00:20:33.992>or <00:20:34.120>provider 00:20:35.830 --> 00:20:35.840 align:start position:0% <00:20:35.830>with <00:20:35.831>its <00:20:35.833>uh <00:20:35.835>firmware <00:20:35.837>or <00:20:35.839>provider 00:20:35.840 --> 00:20:38.670 align:start position:0% <00:20:35.840>with <00:20:35.995>its <00:20:36.151>uh <00:20:36.306>firmware <00:20:36.462>or <00:20:36.617>provider <00:20:36.773>certificate <00:20:36.928>this <00:20:37.084>whole <00:20:37.240>attestation. 00:20:38.670 --> 00:20:38.680 align:start position:0% <00:20:38.670>certificate <00:20:38.673>this <00:20:38.676>whole <00:20:38.679>attestation. 00:20:38.680 --> 00:20:41.030 align:start position:0% <00:20:38.680>certificate <00:20:38.820>this <00:20:38.960>whole <00:20:39.100>attestation. <00:20:39.240>And <00:20:39.380>this <00:20:39.520>makes <00:20:39.660>this <00:20:39.800>whole <00:20:39.940>JSON, <00:20:40.080>of 00:20:41.030 --> 00:20:41.040 align:start position:0% <00:20:41.030>And <00:20:41.031>this <00:20:41.033>makes <00:20:41.034>this <00:20:41.036>whole <00:20:41.037>JSON, <00:20:41.039>of 00:20:41.040 --> 00:20:42.470 align:start position:0% <00:20:41.040>And <00:20:41.147>this <00:20:41.254>makes <00:20:41.361>this <00:20:41.469>whole <00:20:41.576>JSON, <00:20:41.683>of <00:20:41.790>course, <00:20:41.898>as <00:20:42.005>you <00:20:42.112>can <00:20:42.219>imagine, <00:20:42.327>more 00:20:42.470 --> 00:20:42.480 align:start position:0% <00:20:42.470>course, <00:20:42.471>as <00:20:42.473>you <00:20:42.475>can <00:20:42.477>imagine, <00:20:42.479>more 00:20:42.480 --> 00:20:43.950 align:start position:0% <00:20:42.480>course, <00:20:42.700>as <00:20:42.921>you <00:20:43.141>can <00:20:43.362>imagine, <00:20:43.582>more <00:20:43.803>authentic. 00:20:43.950 --> 00:20:43.960 align:start position:0% authentic. 00:20:43.960 --> 00:20:46.910 align:start position:0% <00:20:43.960>authentic. <00:20:44.115>If <00:20:44.271>in <00:20:44.426>the <00:20:44.582>format <00:20:44.737>there <00:20:44.893>can <00:20:45.048>be <00:20:45.204>also <00:20:45.360>a 00:20:46.910 --> 00:20:46.920 align:start position:0% <00:20:46.910>If <00:20:46.911>in <00:20:46.912>the <00:20:46.913>format <00:20:46.914>there <00:20:46.915>can <00:20:46.916>be <00:20:46.917>also <00:20:46.919>a 00:20:46.920 --> 00:20:49.390 align:start position:0% <00:20:46.920>If <00:20:47.020>in <00:20:47.120>the <00:20:47.220>format <00:20:47.320>there <00:20:47.420>can <00:20:47.520>be <00:20:47.620>also <00:20:47.720>a <00:20:47.820>null <00:20:47.920>value. <00:20:48.020>Null <00:20:48.120>value <00:20:48.220>means <00:20:48.320>the 00:20:49.390 --> 00:20:49.400 align:start position:0% <00:20:49.390>null <00:20:49.391>value. <00:20:49.393>Null <00:20:49.395>value <00:20:49.397>means <00:20:49.399>the 00:20:49.400 --> 00:20:51.910 align:start position:0% <00:20:49.400>null <00:20:49.600>value. <00:20:49.800>Null <00:20:50.000>value <00:20:50.200>means <00:20:50.400>the <00:20:50.600>authenticator <00:20:50.800>refused 00:20:51.910 --> 00:20:51.920 align:start position:0% <00:20:51.910>authenticator <00:20:51.919>refused 00:20:51.920 --> 00:20:55.630 align:start position:0% <00:20:51.920>authenticator <00:20:52.075>refused <00:20:52.231>to <00:20:52.386>sign <00:20:52.542>the <00:20:52.697>whole <00:20:52.853>object <00:20:53.008>over <00:20:53.164>here <00:20:53.320>with 00:20:55.630 --> 00:20:55.640 align:start position:0% <00:20:55.630>to <00:20:55.631>sign <00:20:55.632>the <00:20:55.633>whole <00:20:55.635>object <00:20:55.636>over <00:20:55.637>here <00:20:55.639>with 00:20:55.640 --> 00:20:57.830 align:start position:0% <00:20:55.640>to <00:20:55.747>sign <00:20:55.855>the <00:20:55.963>whole <00:20:56.070>object <00:20:56.178>over <00:20:56.286>here <00:20:56.393>with <00:20:56.501>its <00:20:56.609>certificate. <00:20:56.716>So, <00:20:56.824>the <00:20:56.932>So, <00:20:57.040>the 00:20:57.830 --> 00:20:57.840 align:start position:0% <00:20:57.830>its <00:20:57.831>certificate. <00:20:57.833>So, <00:20:57.835>the <00:20:57.837>So, <00:20:57.839>the 00:20:57.840 --> 00:21:00.830 align:start position:0% <00:20:57.840>its <00:20:57.980>certificate. <00:20:58.120>So, <00:20:58.260>the <00:20:58.399>So, <00:20:58.540>the <00:20:58.679>authenticator <00:20:58.820>doesn't <00:20:58.959>prove <00:20:59.100>its <00:20:59.240>its 00:21:00.830 --> 00:21:00.840 align:start position:0% <00:21:00.830>authenticator <00:21:00.832>doesn't <00:21:00.834>prove <00:21:00.836>its <00:21:00.839>its 00:21:00.840 --> 00:21:03.430 align:start position:0% <00:21:00.840>authenticator <00:21:01.073>doesn't <00:21:01.306>prove <00:21:01.540>its <00:21:01.773>its <00:21:02.006>authen- <00:21:02.240>authenticity. 00:21:03.430 --> 00:21:03.440 align:start position:0% <00:21:03.430>authen- <00:21:03.439>authenticity. 00:21:03.440 --> 00:21:05.390 align:start position:0% <00:21:03.440>authen- <00:21:03.640>authenticity. <00:21:03.840>Which <00:21:04.040>could <00:21:04.240>lead <00:21:04.440>to <00:21:04.640>the <00:21:04.840>point 00:21:05.390 --> 00:21:05.400 align:start position:0% <00:21:05.390>Which <00:21:05.391>could <00:21:05.393>lead <00:21:05.395>to <00:21:05.397>the <00:21:05.399>point 00:21:05.400 --> 00:21:06.310 align:start position:0% <00:21:05.400>Which <00:21:05.536>could <00:21:05.673>lead <00:21:05.809>to <00:21:05.946>the <00:21:06.082>point <00:21:06.219>this 00:21:06.310 --> 00:21:06.320 align:start position:0% this 00:21:06.320 --> 00:21:08.830 align:start position:0% <00:21:06.320>this <00:21:06.520>kind <00:21:06.720>of <00:21:06.919>authenticator <00:21:07.120>might <00:21:07.320>be <00:21:07.520>not <00:21:07.720>a 00:21:08.830 --> 00:21:08.840 align:start position:0% <00:21:08.830>kind <00:21:08.831>of <00:21:08.832>authenticator <00:21:08.834>might <00:21:08.836>be <00:21:08.837>not <00:21:08.839>a 00:21:08.840 --> 00:21:10.990 align:start position:0% <00:21:08.840>kind <00:21:08.947>of <00:21:09.055>authenticator <00:21:09.163>might <00:21:09.270>be <00:21:09.378>not <00:21:09.486>a <00:21:09.593>good <00:21:09.701>one, <00:21:09.809>might <00:21:09.916>be <00:21:10.024>an <00:21:10.132>insecure <00:21:10.240>one, 00:21:10.990 --> 00:21:11.000 align:start position:0% <00:21:10.990>good <00:21:10.991>one, <00:21:10.993>might <00:21:10.994>be <00:21:10.996>an <00:21:10.997>insecure <00:21:10.999>one, 00:21:11.000 --> 00:21:13.390 align:start position:0% <00:21:11.000>good <00:21:11.155>one, <00:21:11.311>might <00:21:11.466>be <00:21:11.622>an <00:21:11.777>insecure <00:21:11.933>one, <00:21:12.088>might <00:21:12.244>be <00:21:12.400>somehow 00:21:13.390 --> 00:21:13.400 align:start position:0% <00:21:13.390>might <00:21:13.394>be <00:21:13.399>somehow 00:21:13.400 --> 00:21:15.750 align:start position:0% <00:21:13.400>might <00:21:13.555>be <00:21:13.711>somehow <00:21:13.866>be <00:21:14.022>broken <00:21:14.177>or <00:21:14.333>whatnot. <00:21:14.488>So, <00:21:14.644>you <00:21:14.800>never 00:21:15.750 --> 00:21:15.760 align:start position:0% <00:21:15.750>be <00:21:15.751>broken <00:21:15.753>or <00:21:15.754>whatnot. <00:21:15.756>So, <00:21:15.757>you <00:21:15.759>never 00:21:15.760 --> 00:21:18.790 align:start position:0% <00:21:15.760>be <00:21:15.900>broken <00:21:16.040>or <00:21:16.180>whatnot. <00:21:16.320>So, <00:21:16.460>you <00:21:16.600>never <00:21:16.740>should <00:21:16.879>accept <00:21:17.020>an <00:21:17.160>authenticator 00:21:18.790 --> 00:21:18.800 align:start position:0% <00:21:18.790>should <00:21:18.793>accept <00:21:18.796>an <00:21:18.799>authenticator 00:21:18.800 --> 00:21:21.750 align:start position:0% <00:21:18.800>should <00:21:18.927>accept <00:21:19.054>an <00:21:19.181>authenticator <00:21:19.309>that <00:21:19.436>has <00:21:19.563>the <00:21:19.690>format <00:21:19.818>non <00:21:19.945>value. <00:21:20.072>And <00:21:20.200>of 00:21:21.750 --> 00:21:21.760 align:start position:0% <00:21:21.750>that <00:21:21.751>has <00:21:21.752>the <00:21:21.753>format <00:21:21.755>non <00:21:21.756>value. <00:21:21.757>And <00:21:21.759>of 00:21:21.760 --> 00:21:23.950 align:start position:0% <00:21:21.760>that <00:21:21.860>has <00:21:21.960>the <00:21:22.060>format <00:21:22.160>non <00:21:22.260>value. <00:21:22.360>And <00:21:22.460>of <00:21:22.560>course, <00:21:22.660>always <00:21:22.760>check <00:21:22.860>for <00:21:22.960>this <00:21:23.060>kind <00:21:23.160>of 00:21:23.950 --> 00:21:23.960 align:start position:0% <00:21:23.950>course, <00:21:23.951>always <00:21:23.953>check <00:21:23.954>for <00:21:23.956>this <00:21:23.957>kind <00:21:23.959>of 00:21:23.960 --> 00:21:25.430 align:start position:0% <00:21:23.960>course, <00:21:24.149>always <00:21:24.338>check <00:21:24.527>for <00:21:24.716>this <00:21:24.905>kind <00:21:25.094>of <00:21:25.283>signature 00:21:25.430 --> 00:21:25.440 align:start position:0% signature 00:21:25.440 --> 00:21:28.070 align:start position:0% <00:21:25.440>signature <00:21:25.720>a <00:21:26.000>certificate. <00:21:26.280>Another <00:21:26.560>really <00:21:26.840>important 00:21:28.070 --> 00:21:28.080 align:start position:0% <00:21:28.070>a <00:21:28.072>certificate. <00:21:28.074>Another <00:21:28.076>really <00:21:28.079>important 00:21:28.080 --> 00:21:31.190 align:start position:0% <00:21:28.080>a <00:21:28.196>certificate. <00:21:28.313>Another <00:21:28.429>really <00:21:28.546>important <00:21:28.663>thing <00:21:28.780>is <00:21:28.896>the <00:21:29.013>good <00:21:29.129>over <00:21:29.246>here. <00:21:29.363>It's <00:21:29.480>called 00:21:31.190 --> 00:21:31.200 align:start position:0% <00:21:31.190>thing <00:21:31.191>is <00:21:31.192>the <00:21:31.193>good <00:21:31.195>over <00:21:31.196>here. <00:21:31.197>It's <00:21:31.199>called 00:21:31.200 --> 00:21:34.230 align:start position:0% <00:21:31.200>thing <00:21:31.316>is <00:21:31.433>the <00:21:31.550>good <00:21:31.666>over <00:21:31.783>here. <00:21:31.900>It's <00:21:32.016>called <00:21:32.133>authenticator <00:21:32.250>attestation <00:21:32.366>good. <00:21:32.483>This <00:21:32.600>is 00:21:34.230 --> 00:21:34.240 align:start position:0% <00:21:34.230>authenticator <00:21:34.232>attestation <00:21:34.234>good. <00:21:34.236>This <00:21:34.239>is 00:21:34.240 --> 00:21:36.270 align:start position:0% <00:21:34.240>authenticator <00:21:34.380>attestation <00:21:34.520>good. <00:21:34.660>This <00:21:34.800>is <00:21:34.940>basically <00:21:35.080>good <00:21:35.220>that <00:21:35.360>tells <00:21:35.500>exactly <00:21:35.640>the 00:21:36.270 --> 00:21:36.280 align:start position:0% <00:21:36.270>basically <00:21:36.271>good <00:21:36.273>that <00:21:36.275>tells <00:21:36.277>exactly <00:21:36.279>the 00:21:36.280 --> 00:21:39.270 align:start position:0% <00:21:36.280>basically <00:21:36.455>good <00:21:36.629>that <00:21:36.805>tells <00:21:36.980>exactly <00:21:37.155>the <00:21:37.330>authenticator <00:21:37.504>model <00:21:37.680>of 00:21:39.270 --> 00:21:39.280 align:start position:0% <00:21:39.270>authenticator <00:21:39.274>model <00:21:39.279>of 00:21:39.280 --> 00:21:40.910 align:start position:0% <00:21:39.280>authenticator <00:21:39.480>model <00:21:39.680>of <00:21:39.879>the <00:21:40.080>the <00:21:40.280>given <00:21:40.480>authenticator. <00:21:40.680>For 00:21:40.910 --> 00:21:40.920 align:start position:0% <00:21:40.910>the <00:21:40.912>the <00:21:40.914>given <00:21:40.916>authenticator. <00:21:40.919>For 00:21:40.920 --> 00:21:43.670 align:start position:0% <00:21:40.920>the <00:21:41.047>the <00:21:41.174>given <00:21:41.301>authenticator. <00:21:41.429>For <00:21:41.556>instance, <00:21:41.683>this <00:21:41.810>one <00:21:41.938>would <00:21:42.065>be <00:21:42.192>YubiKey <00:21:42.320>5 00:21:43.670 --> 00:21:43.680 align:start position:0% <00:21:43.670>instance, <00:21:43.671>this <00:21:43.673>one <00:21:43.674>would <00:21:43.676>be <00:21:43.677>YubiKey <00:21:43.679>5 00:21:43.680 --> 00:21:46.790 align:start position:0% <00:21:43.680>instance, <00:21:43.780>this <00:21:43.880>one <00:21:43.980>would <00:21:44.080>be <00:21:44.180>YubiKey <00:21:44.280>5 <00:21:44.380>Series. <00:21:44.480>And <00:21:44.580>with <00:21:44.680>this <00:21:44.780>kind <00:21:44.880>of <00:21:44.980>good, <00:21:45.080>the 00:21:46.790 --> 00:21:46.800 align:start position:0% <00:21:46.790>Series. <00:21:46.791>And <00:21:46.792>with <00:21:46.793>this <00:21:46.795>kind <00:21:46.796>of <00:21:46.797>good, <00:21:46.799>the 00:21:46.800 --> 00:21:49.390 align:start position:0% <00:21:46.800>Series. <00:21:46.907>And <00:21:47.015>with <00:21:47.123>this <00:21:47.230>kind <00:21:47.338>of <00:21:47.446>good, <00:21:47.553>the <00:21:47.661>server <00:21:47.769>should <00:21:47.876>reach <00:21:47.984>out <00:21:48.092>to <00:21:48.200>something 00:21:49.390 --> 00:21:49.400 align:start position:0% <00:21:49.390>server <00:21:49.391>should <00:21:49.393>reach <00:21:49.395>out <00:21:49.397>to <00:21:49.399>something 00:21:49.400 --> 00:21:52.310 align:start position:0% <00:21:49.400>server <00:21:49.540>should <00:21:49.680>reach <00:21:49.820>out <00:21:49.960>to <00:21:50.100>something <00:21:50.240>that's <00:21:50.380>called <00:21:50.520>FIDO <00:21:50.660>metadata <00:21:50.800>service. 00:21:52.310 --> 00:21:52.320 align:start position:0% <00:21:52.310>that's <00:21:52.312>called <00:21:52.314>FIDO <00:21:52.316>metadata <00:21:52.319>service. 00:21:52.320 --> 00:21:54.790 align:start position:0% <00:21:52.320>that's <00:21:52.460>called <00:21:52.600>FIDO <00:21:52.740>metadata <00:21:52.879>service. <00:21:53.020>And <00:21:53.159>by <00:21:53.300>calling <00:21:53.439>this <00:21:53.580>metadata <00:21:53.720>service, 00:21:54.790 --> 00:21:54.800 align:start position:0% <00:21:54.790>And <00:21:54.791>by <00:21:54.793>calling <00:21:54.795>this <00:21:54.797>metadata <00:21:54.799>service, 00:21:54.800 --> 00:21:57.190 align:start position:0% <00:21:54.800>And <00:21:54.955>by <00:21:55.111>calling <00:21:55.266>this <00:21:55.422>metadata <00:21:55.577>service, <00:21:55.733>it's <00:21:55.888>something <00:21:56.044>like, <00:21:56.200>"Hey, 00:21:57.190 --> 00:21:57.200 align:start position:0% <00:21:57.190>it's <00:21:57.193>something <00:21:57.196>like, <00:21:57.199>"Hey, 00:21:57.200 --> 00:22:00.430 align:start position:0% <00:21:57.200>it's <00:21:57.375>something <00:21:57.550>like, <00:21:57.725>"Hey, <00:21:57.900>there's <00:21:58.075>an <00:21:58.250>authenticator <00:21:58.425>YubiKey <00:21:58.600>5. 00:22:00.430 --> 00:22:00.440 align:start position:0% <00:22:00.430>there's <00:22:00.432>an <00:22:00.434>authenticator <00:22:00.436>YubiKey <00:22:00.439>5. 00:22:00.440 --> 00:22:02.310 align:start position:0% <00:22:00.440>there's <00:22:00.556>an <00:22:00.673>authenticator <00:22:00.790>YubiKey <00:22:00.906>5. <00:22:01.023>Can <00:22:01.140>you <00:22:01.256>tell <00:22:01.373>me <00:22:01.490>something <00:22:01.606>about <00:22:01.723>it? <00:22:01.840>Are 00:22:02.310 --> 00:22:02.320 align:start position:0% <00:22:02.310>Can <00:22:02.311>you <00:22:02.312>tell <00:22:02.313>me <00:22:02.315>something <00:22:02.316>about <00:22:02.317>it? <00:22:02.319>Are 00:22:02.320 --> 00:22:04.430 align:start position:0% <00:22:02.320>Can <00:22:02.427>you <00:22:02.535>tell <00:22:02.643>me <00:22:02.750>something <00:22:02.858>about <00:22:02.966>it? <00:22:03.073>Are <00:22:03.181>there <00:22:03.289>some <00:22:03.396>known <00:22:03.504>security <00:22:03.612>issues? <00:22:03.720>How 00:22:04.430 --> 00:22:04.440 align:start position:0% <00:22:04.430>there <00:22:04.431>some <00:22:04.433>known <00:22:04.435>security <00:22:04.437>issues? <00:22:04.439>How 00:22:04.440 --> 00:22:06.590 align:start position:0% <00:22:04.440>there <00:22:04.567>some <00:22:04.694>known <00:22:04.821>security <00:22:04.949>issues? <00:22:05.076>How <00:22:05.203>old <00:22:05.330>is <00:22:05.458>this <00:22:05.585>authenticator?" <00:22:05.712>Like <00:22:05.840>typical 00:22:06.590 --> 00:22:06.600 align:start position:0% <00:22:06.590>old <00:22:06.591>is <00:22:06.593>this <00:22:06.595>authenticator?" <00:22:06.597>Like <00:22:06.599>typical 00:22:06.600 --> 00:22:08.430 align:start position:0% <00:22:06.600>old <00:22:06.755>is <00:22:06.911>this <00:22:07.066>authenticator?" <00:22:07.222>Like <00:22:07.377>typical <00:22:07.533>metadata <00:22:07.688>things <00:22:07.844>about <00:22:08.000>this 00:22:08.430 --> 00:22:08.440 align:start position:0% <00:22:08.430>metadata <00:22:08.433>things <00:22:08.436>about <00:22:08.439>this 00:22:08.440 --> 00:22:10.550 align:start position:0% <00:22:08.440>metadata <00:22:08.595>things <00:22:08.751>about <00:22:08.906>this <00:22:09.062>authenticator. <00:22:09.217>And <00:22:09.373>then <00:22:09.528>of <00:22:09.684>course, <00:22:09.840>the 00:22:10.550 --> 00:22:10.560 align:start position:0% <00:22:10.550>authenticator. <00:22:10.551>And <00:22:10.553>then <00:22:10.555>of <00:22:10.557>course, <00:22:10.559>the 00:22:10.560 --> 00:22:12.710 align:start position:0% <00:22:10.560>authenticator. <00:22:10.687>And <00:22:10.814>then <00:22:10.941>of <00:22:11.069>course, <00:22:11.196>the <00:22:11.323>service <00:22:11.450>this <00:22:11.578>metadata <00:22:11.705>service <00:22:11.832>can <00:22:11.960>give 00:22:12.710 --> 00:22:12.720 align:start position:0% <00:22:12.710>service <00:22:12.711>this <00:22:12.713>metadata <00:22:12.715>service <00:22:12.717>can <00:22:12.719>give 00:22:12.720 --> 00:22:16.390 align:start position:0% <00:22:12.720>service <00:22:12.847>this <00:22:12.974>metadata <00:22:13.101>service <00:22:13.229>can <00:22:13.356>give <00:22:13.483>the <00:22:13.610>server <00:22:13.738>enough <00:22:13.865>information <00:22:13.992>to <00:22:14.120>decide 00:22:16.390 --> 00:22:16.400 align:start position:0% <00:22:16.390>the <00:22:16.391>server <00:22:16.393>enough <00:22:16.395>information <00:22:16.397>to <00:22:16.399>decide 00:22:16.400 --> 00:22:18.230 align:start position:0% <00:22:16.400>the <00:22:16.516>server <00:22:16.633>enough <00:22:16.750>information <00:22:16.866>to <00:22:16.983>decide <00:22:17.100>if <00:22:17.216>it <00:22:17.333>should <00:22:17.450>block <00:22:17.566>or <00:22:17.683>reject <00:22:17.800>this 00:22:18.230 --> 00:22:18.240 align:start position:0% <00:22:18.230>if <00:22:18.231>it <00:22:18.233>should <00:22:18.234>block <00:22:18.236>or <00:22:18.237>reject <00:22:18.239>this 00:22:18.240 --> 00:22:20.830 align:start position:0% <00:22:18.240>if <00:22:18.395>it <00:22:18.551>should <00:22:18.706>block <00:22:18.862>or <00:22:19.017>reject <00:22:19.173>this <00:22:19.328>authenticator <00:22:19.484>or <00:22:19.640>not. 00:22:20.830 --> 00:22:20.840 align:start position:0% <00:22:20.830>authenticator <00:22:20.834>or <00:22:20.839>not. 00:22:20.840 --> 00:22:23.190 align:start position:0% <00:22:20.840>authenticator <00:22:20.967>or <00:22:21.094>not. <00:22:21.221>If <00:22:21.349>the <00:22:21.476>server <00:22:21.603>by <00:22:21.730>the <00:22:21.858>way <00:22:21.985>blocks <00:22:22.112>the <00:22:22.240>pass 00:22:23.190 --> 00:22:23.200 align:start position:0% <00:22:23.190>If <00:22:23.191>the <00:22:23.192>server <00:22:23.193>by <00:22:23.194>the <00:22:23.195>way <00:22:23.196>blocks <00:22:23.197>the <00:22:23.199>pass 00:22:23.200 --> 00:22:25.230 align:start position:0% <00:22:23.200>If <00:22:23.300>the <00:22:23.400>server <00:22:23.500>by <00:22:23.600>the <00:22:23.700>way <00:22:23.800>blocks <00:22:23.900>the <00:22:24.000>pass <00:22:24.100>key <00:22:24.200>blocks <00:22:24.300>the <00:22:24.400>authenticator, <00:22:24.500>the <00:22:24.600>user 00:22:25.230 --> 00:22:25.240 align:start position:0% <00:22:25.230>key <00:22:25.231>blocks <00:22:25.233>the <00:22:25.235>authenticator, <00:22:25.237>the <00:22:25.239>user 00:22:25.240 --> 00:22:27.590 align:start position:0% <00:22:25.240>key <00:22:25.347>blocks <00:22:25.455>the <00:22:25.563>authenticator, <00:22:25.670>the <00:22:25.778>user <00:22:25.886>is <00:22:25.993>not <00:22:26.101>able <00:22:26.209>to, <00:22:26.316>as <00:22:26.424>you <00:22:26.532>can <00:22:26.640>imagine, 00:22:27.590 --> 00:22:27.600 align:start position:0% <00:22:27.590>is <00:22:27.591>not <00:22:27.592>able <00:22:27.593>to, <00:22:27.595>as <00:22:27.596>you <00:22:27.597>can <00:22:27.599>imagine, 00:22:27.600 --> 00:22:30.270 align:start position:0% <00:22:27.600>is <00:22:27.699>not <00:22:27.800>able <00:22:27.899>to, <00:22:28.000>as <00:22:28.100>you <00:22:28.199>can <00:22:28.300>imagine, <00:22:28.399>register <00:22:28.500>this <00:22:28.600>kind <00:22:28.699>of <00:22:28.800>pass <00:22:28.899>key <00:22:29.000>given 00:22:30.270 --> 00:22:30.280 align:start position:0% <00:22:30.270>register <00:22:30.271>this <00:22:30.273>kind <00:22:30.274>of <00:22:30.276>pass <00:22:30.277>key <00:22:30.279>given 00:22:30.280 --> 00:22:33.150 align:start position:0% <00:22:30.280>register <00:22:30.420>this <00:22:30.560>kind <00:22:30.700>of <00:22:30.840>pass <00:22:30.980>key <00:22:31.120>given <00:22:31.260>this <00:22:31.399>kind <00:22:31.540>of <00:22:31.680>authenticator. 00:22:33.150 --> 00:22:33.160 align:start position:0% <00:22:33.150>this <00:22:33.153>kind <00:22:33.156>of <00:22:33.159>authenticator. 00:22:33.160 --> 00:22:35.830 align:start position:0% <00:22:33.160>this <00:22:33.287>kind <00:22:33.414>of <00:22:33.541>authenticator. <00:22:33.669>You <00:22:33.796>can <00:22:33.923>enable <00:22:34.050>this <00:22:34.178>whole <00:22:34.305>check <00:22:34.432>and <00:22:34.560>you 00:22:35.830 --> 00:22:35.840 align:start position:0% <00:22:35.830>You <00:22:35.831>can <00:22:35.832>enable <00:22:35.833>this <00:22:35.835>whole <00:22:35.836>check <00:22:35.837>and <00:22:35.839>you 00:22:35.840 --> 00:22:37.990 align:start position:0% <00:22:35.840>You <00:22:35.956>can <00:22:36.073>enable <00:22:36.189>this <00:22:36.306>whole <00:22:36.423>check <00:22:36.540>and <00:22:36.656>you <00:22:36.773>should <00:22:36.889>enable <00:22:37.006>this <00:22:37.123>whole <00:22:37.240>check. 00:22:37.990 --> 00:22:38.000 align:start position:0% <00:22:37.990>should <00:22:37.992>enable <00:22:37.994>this <00:22:37.996>whole <00:22:37.999>check. 00:22:38.000 --> 00:22:42.670 align:start position:0% <00:22:38.000>should <00:22:38.100>enable <00:22:38.200>this <00:22:38.300>whole <00:22:38.400>check. <00:22:38.500>Um <00:22:38.600>here <00:22:38.700>by <00:22:38.800>do <00:22:38.900>do <00:22:39.000>do, <00:22:39.100>it <00:22:39.200>was <00:22:39.300>here. <00:22:39.400>Yes. 00:22:42.670 --> 00:22:42.680 align:start position:0% <00:22:42.670>Um <00:22:42.671>here <00:22:42.672>by <00:22:42.673>do <00:22:42.674>do <00:22:42.675>do, <00:22:42.676>it <00:22:42.677>was <00:22:42.678>here. <00:22:42.679>Yes. 00:22:42.680 --> 00:22:45.630 align:start position:0% <00:22:42.680>Um <00:22:42.780>here <00:22:42.880>by <00:22:42.980>do <00:22:43.080>do <00:22:43.180>do, <00:22:43.280>it <00:22:43.380>was <00:22:43.480>here. <00:22:43.580>Yes. <00:22:43.680>Um <00:22:43.780>by <00:22:43.880>the <00:22:43.980>attestation <00:22:44.080>conveyance 00:22:45.630 --> 00:22:45.640 align:start position:0% <00:22:45.630>Um <00:22:45.632>by <00:22:45.634>the <00:22:45.636>attestation <00:22:45.639>conveyance 00:22:45.640 --> 00:22:47.110 align:start position:0% <00:22:45.640>Um <00:22:45.904>by <00:22:46.169>the <00:22:46.433>attestation <00:22:46.698>conveyance <00:22:46.963>preference. 00:22:47.110 --> 00:22:47.120 align:start position:0% preference. 00:22:47.120 --> 00:22:49.710 align:start position:0% <00:22:47.120>preference. <00:22:47.320>Here <00:22:47.520>for <00:22:47.719>instance, <00:22:47.919>when <00:22:48.120>you <00:22:48.320>enable <00:22:48.520>it 00:22:49.710 --> 00:22:49.720 align:start position:0% <00:22:49.710>Here <00:22:49.711>for <00:22:49.713>instance, <00:22:49.714>when <00:22:49.716>you <00:22:49.717>enable <00:22:49.719>it 00:22:49.720 --> 00:22:54.350 align:start position:0% <00:22:49.720>Here <00:22:49.827>for <00:22:49.935>instance, <00:22:50.043>when <00:22:50.150>you <00:22:50.258>enable <00:22:50.366>it <00:22:50.473>with <00:22:50.581>direct, <00:22:50.689>it <00:22:50.796>means <00:22:50.904>Keycloak <00:22:51.012>now <00:22:51.120>um 00:22:54.350 --> 00:22:54.360 align:start position:0% <00:22:54.350>with <00:22:54.351>direct, <00:22:54.352>it <00:22:54.354>means <00:22:54.356>Keycloak <00:22:54.357>now <00:22:54.359>um 00:22:54.360 --> 00:22:57.310 align:start position:0% <00:22:54.360>with <00:22:54.467>direct, <00:22:54.575>it <00:22:54.683>means <00:22:54.790>Keycloak <00:22:54.898>now <00:22:55.006>um <00:22:55.113>calls <00:22:55.221>the <00:22:55.329>MD <00:22:55.436>MDS <00:22:55.544>service <00:22:55.652>like <00:22:55.760>the 00:22:57.310 --> 00:22:57.320 align:start position:0% <00:22:57.310>calls <00:22:57.311>the <00:22:57.312>MD <00:22:57.314>MDS <00:22:57.316>service <00:22:57.317>like <00:22:57.319>the 00:22:57.320 --> 00:23:00.550 align:start position:0% <00:22:57.320>calls <00:22:57.427>the <00:22:57.535>MD <00:22:57.643>MDS <00:22:57.750>service <00:22:57.858>like <00:22:57.966>the <00:22:58.073>metadata <00:22:58.181>service <00:22:58.289>with <00:22:58.396>the <00:22:58.504>given <00:22:58.612>good. <00:22:58.720>It 00:23:00.550 --> 00:23:00.560 align:start position:0% <00:23:00.550>metadata <00:23:00.551>service <00:23:00.553>with <00:23:00.554>the <00:23:00.556>given <00:23:00.557>good. <00:23:00.559>It 00:23:00.560 --> 00:23:02.950 align:start position:0% <00:23:00.560>metadata <00:23:00.667>service <00:23:00.775>with <00:23:00.883>the <00:23:00.990>given <00:23:01.098>good. <00:23:01.206>It <00:23:01.313>checks <00:23:01.421>for <00:23:01.529>the <00:23:01.636>signature. <00:23:01.744>It <00:23:01.852>checks <00:23:01.960>for 00:23:02.950 --> 00:23:02.960 align:start position:0% <00:23:02.950>checks <00:23:02.951>for <00:23:02.953>the <00:23:02.954>signature. <00:23:02.956>It <00:23:02.957>checks <00:23:02.959>for 00:23:02.960 --> 00:23:04.990 align:start position:0% <00:23:02.960>checks <00:23:03.067>for <00:23:03.175>the <00:23:03.283>signature. <00:23:03.390>It <00:23:03.498>checks <00:23:03.606>for <00:23:03.713>the <00:23:03.821>format <00:23:03.929>and <00:23:04.036>whatnot, <00:23:04.144>and <00:23:04.252>it <00:23:04.360>would 00:23:04.990 --> 00:23:05.000 align:start position:0% <00:23:04.990>the <00:23:04.991>format <00:23:04.993>and <00:23:04.994>whatnot, <00:23:04.996>and <00:23:04.997>it <00:23:04.999>would 00:23:05.000 --> 00:23:08.230 align:start position:0% <00:23:05.000>the <00:23:05.107>format <00:23:05.215>and <00:23:05.323>whatnot, <00:23:05.430>and <00:23:05.538>it <00:23:05.646>would <00:23:05.753>recheck <00:23:05.861>any <00:23:05.969>kind <00:23:06.076>of <00:23:06.184>passkey <00:23:06.292>or <00:23:06.400>like 00:23:08.230 --> 00:23:08.240 align:start position:0% <00:23:08.230>recheck <00:23:08.231>any <00:23:08.233>kind <00:23:08.234>of <00:23:08.236>passkey <00:23:08.237>or <00:23:08.239>like 00:23:08.240 --> 00:23:10.470 align:start position:0% <00:23:08.240>recheck <00:23:08.356>any <00:23:08.473>kind <00:23:08.590>of <00:23:08.706>passkey <00:23:08.823>or <00:23:08.940>like <00:23:09.056>attestation <00:23:09.173>object <00:23:09.290>that <00:23:09.406>has <00:23:09.523>this <00:23:09.640>format 00:23:10.470 --> 00:23:10.480 align:start position:0% <00:23:10.470>attestation <00:23:10.471>object <00:23:10.473>that <00:23:10.475>has <00:23:10.477>this <00:23:10.479>format 00:23:10.480 --> 00:23:11.910 align:start position:0% <00:23:10.480>attestation <00:23:10.663>object <00:23:10.847>that <00:23:11.031>has <00:23:11.215>this <00:23:11.399>format <00:23:11.583>non <00:23:11.767>value. 00:23:11.910 --> 00:23:11.920 align:start position:0% <00:23:11.910>non <00:23:11.919>value. 00:23:11.920 --> 00:23:14.350 align:start position:0% <00:23:11.920>non <00:23:12.153>value. <00:23:12.386>There <00:23:12.620>are <00:23:12.853>other <00:23:13.086>values <00:23:13.320>indirect. 00:23:14.350 --> 00:23:14.360 align:start position:0% <00:23:14.350>There <00:23:14.352>are <00:23:14.354>other <00:23:14.356>values <00:23:14.359>indirect. 00:23:14.360 --> 00:23:16.390 align:start position:0% <00:23:14.360>There <00:23:14.560>are <00:23:14.760>other <00:23:14.959>values <00:23:15.159>indirect. <00:23:15.360>Indirect <00:23:15.560>basically <00:23:15.760>means 00:23:16.390 --> 00:23:16.400 align:start position:0% <00:23:16.390>Indirect <00:23:16.394>basically <00:23:16.399>means 00:23:16.400 --> 00:23:18.870 align:start position:0% <00:23:16.400>Indirect <00:23:16.527>basically <00:23:16.654>means <00:23:16.781>um <00:23:16.909>as <00:23:17.036>far <00:23:17.163>as <00:23:17.290>I <00:23:17.418>understood <00:23:17.545>at <00:23:17.672>least <00:23:17.800>that 00:23:18.870 --> 00:23:18.880 align:start position:0% <00:23:18.870>um <00:23:18.871>as <00:23:18.872>far <00:23:18.873>as <00:23:18.874>I <00:23:18.875>understood <00:23:18.876>at <00:23:18.877>least <00:23:18.879>that 00:23:18.880 --> 00:23:21.310 align:start position:0% <00:23:18.880>um <00:23:18.967>as <00:23:19.055>far <00:23:19.142>as <00:23:19.230>I <00:23:19.317>understood <00:23:19.405>at <00:23:19.492>least <00:23:19.580>that <00:23:19.667>just <00:23:19.755>if <00:23:19.842>there's <00:23:19.930>a <00:23:20.017>given <00:23:20.105>format, <00:23:20.192>so <00:23:20.280>if 00:23:21.310 --> 00:23:21.320 align:start position:0% <00:23:21.310>just <00:23:21.311>if <00:23:21.312>there's <00:23:21.313>a <00:23:21.315>given <00:23:21.316>format, <00:23:21.317>so <00:23:21.319>if 00:23:21.320 --> 00:23:24.350 align:start position:0% <00:23:21.320>just <00:23:21.413>if <00:23:21.506>there's <00:23:21.600>a <00:23:21.693>given <00:23:21.786>format, <00:23:21.879>so <00:23:21.973>if <00:23:22.066>the <00:23:22.159>value <00:23:22.253>is <00:23:22.346>not <00:23:22.439>none, <00:23:22.533>it <00:23:22.626>would <00:23:22.720>check 00:23:24.350 --> 00:23:24.360 align:start position:0% <00:23:24.350>the <00:23:24.351>value <00:23:24.352>is <00:23:24.353>not <00:23:24.355>none, <00:23:24.356>it <00:23:24.357>would <00:23:24.359>check 00:23:24.360 --> 00:23:26.190 align:start position:0% <00:23:24.360>the <00:23:24.459>value <00:23:24.560>is <00:23:24.659>not <00:23:24.760>none, <00:23:24.860>it <00:23:24.959>would <00:23:25.060>check <00:23:25.159>for <00:23:25.260>the <00:23:25.360>metadata <00:23:25.459>service <00:23:25.560>and <00:23:25.659>all <00:23:25.760>these 00:23:26.190 --> 00:23:26.200 align:start position:0% <00:23:26.190>for <00:23:26.191>the <00:23:26.193>metadata <00:23:26.194>service <00:23:26.196>and <00:23:26.197>all <00:23:26.199>these 00:23:26.200 --> 00:23:27.750 align:start position:0% <00:23:26.200>for <00:23:26.355>the <00:23:26.510>metadata <00:23:26.665>service <00:23:26.820>and <00:23:26.975>all <00:23:27.130>these <00:23:27.285>kind <00:23:27.440>of <00:23:27.595>things. 00:23:27.750 --> 00:23:27.760 align:start position:0% <00:23:27.750>kind <00:23:27.754>of <00:23:27.759>things. 00:23:27.760 --> 00:23:30.510 align:start position:0% <00:23:27.760>kind <00:23:27.887>of <00:23:28.014>things. <00:23:28.141>Um <00:23:28.269>but <00:23:28.396>if <00:23:28.523>there's <00:23:28.650>a <00:23:28.778>non <00:23:28.905>value <00:23:29.032>inside <00:23:29.160>it, 00:23:30.510 --> 00:23:30.520 align:start position:0% <00:23:30.510>Um <00:23:30.511>but <00:23:30.512>if <00:23:30.513>there's <00:23:30.514>a <00:23:30.515>non <00:23:30.516>value <00:23:30.517>inside <00:23:30.519>it, 00:23:30.520 --> 00:23:32.070 align:start position:0% <00:23:30.520>Um <00:23:30.619>but <00:23:30.719>if <00:23:30.818>there's <00:23:30.918>a <00:23:31.018>non <00:23:31.117>value <00:23:31.217>inside <00:23:31.317>it, <00:23:31.416>it <00:23:31.516>would <00:23:31.616>still <00:23:31.715>accept <00:23:31.815>the <00:23:31.915>passkey. 00:23:32.070 --> 00:23:32.080 align:start position:0% <00:23:32.070>it <00:23:32.071>would <00:23:32.073>still <00:23:32.075>accept <00:23:32.077>the <00:23:32.079>passkey. 00:23:32.080 --> 00:23:33.550 align:start position:0% <00:23:32.080>it <00:23:32.190>would <00:23:32.300>still <00:23:32.410>accept <00:23:32.521>the <00:23:32.631>passkey. <00:23:32.741>That's <00:23:32.851>at <00:23:32.962>least <00:23:33.072>how <00:23:33.182>I <00:23:33.292>understood <00:23:33.403>this 00:23:33.550 --> 00:23:33.560 align:start position:0% <00:23:33.550>That's <00:23:33.551>at <00:23:33.553>least <00:23:33.554>how <00:23:33.556>I <00:23:33.557>understood <00:23:33.559>this 00:23:33.560 --> 00:23:36.430 align:start position:0% <00:23:33.560>That's <00:23:33.687>at <00:23:33.814>least <00:23:33.941>how <00:23:34.069>I <00:23:34.196>understood <00:23:34.323>this <00:23:34.450>indirect <00:23:34.578>value, <00:23:34.705>which <00:23:34.832>of <00:23:34.960>course 00:23:36.430 --> 00:23:36.440 align:start position:0% <00:23:36.430>indirect <00:23:36.432>value, <00:23:36.434>which <00:23:36.436>of <00:23:36.439>course 00:23:36.440 --> 00:23:38.630 align:start position:0% <00:23:36.440>indirect <00:23:36.547>value, <00:23:36.655>which <00:23:36.763>of <00:23:36.870>course <00:23:36.978>doesn't <00:23:37.086>make <00:23:37.193>so <00:23:37.301>much <00:23:37.409>sense <00:23:37.516>if <00:23:37.624>you <00:23:37.732>want <00:23:37.840>a 00:23:38.630 --> 00:23:38.640 align:start position:0% <00:23:38.630>doesn't <00:23:38.631>make <00:23:38.632>so <00:23:38.633>much <00:23:38.634>sense <00:23:38.635>if <00:23:38.636>you <00:23:38.637>want <00:23:38.639>a 00:23:38.640 --> 00:23:41.150 align:start position:0% <00:23:38.640>doesn't <00:23:38.740>make <00:23:38.840>so <00:23:38.940>much <00:23:39.040>sense <00:23:39.140>if <00:23:39.240>you <00:23:39.340>want <00:23:39.440>a <00:23:39.540>really <00:23:39.640>strict <00:23:39.740>security <00:23:39.840>uh <00:23:39.940>guideline <00:23:40.040>over 00:23:41.150 --> 00:23:41.160 align:start position:0% <00:23:41.150>really <00:23:41.151>strict <00:23:41.153>security <00:23:41.155>uh <00:23:41.157>guideline <00:23:41.159>over 00:23:41.160 --> 00:23:42.910 align:start position:0% <00:23:41.160>really <00:23:41.393>strict <00:23:41.626>security <00:23:41.860>uh <00:23:42.093>guideline <00:23:42.326>over <00:23:42.560>here. 00:23:42.910 --> 00:23:42.920 align:start position:0% here. 00:23:42.920 --> 00:23:45.590 align:start position:0% <00:23:42.920>here. <00:23:43.120>Additionally, <00:23:43.320>what <00:23:43.520>we <00:23:43.720>also <00:23:43.920>find <00:23:44.120>here <00:23:44.320>is 00:23:45.590 --> 00:23:45.600 align:start position:0% <00:23:45.590>Additionally, <00:23:45.591>what <00:23:45.592>we <00:23:45.594>also <00:23:45.596>find <00:23:45.597>here <00:23:45.599>is 00:23:45.600 --> 00:23:48.030 align:start position:0% <00:23:45.600>Additionally, <00:23:45.707>what <00:23:45.815>we <00:23:45.923>also <00:23:46.030>find <00:23:46.138>here <00:23:46.246>is <00:23:46.353>a <00:23:46.461>whitelist <00:23:46.569>for <00:23:46.676>GUIDs, <00:23:46.784>a <00:23:46.892>whitelist <00:23:47.000>for 00:23:48.030 --> 00:23:48.040 align:start position:0% <00:23:48.030>a <00:23:48.031>whitelist <00:23:48.033>for <00:23:48.034>GUIDs, <00:23:48.036>a <00:23:48.037>whitelist <00:23:48.039>for 00:23:48.040 --> 00:23:50.150 align:start position:0% <00:23:48.040>a <00:23:48.156>whitelist <00:23:48.273>for <00:23:48.389>GUIDs, <00:23:48.506>a <00:23:48.623>whitelist <00:23:48.740>for <00:23:48.856>authenticators, <00:23:48.973>which <00:23:49.090>is <00:23:49.206>in <00:23:49.323>my <00:23:49.440>opinion 00:23:50.150 --> 00:23:50.160 align:start position:0% <00:23:50.150>authenticators, <00:23:50.151>which <00:23:50.153>is <00:23:50.155>in <00:23:50.157>my <00:23:50.159>opinion 00:23:50.160 --> 00:23:53.710 align:start position:0% <00:23:50.160>authenticators, <00:23:50.276>which <00:23:50.393>is <00:23:50.510>in <00:23:50.626>my <00:23:50.743>opinion <00:23:50.860>really <00:23:50.976>great. <00:23:51.093>So, <00:23:51.210>you <00:23:51.326>can <00:23:51.443>just <00:23:51.560>disallow 00:23:53.710 --> 00:23:53.720 align:start position:0% <00:23:53.710>really <00:23:53.711>great. <00:23:53.713>So, <00:23:53.714>you <00:23:53.716>can <00:23:53.717>just <00:23:53.719>disallow 00:23:53.720 --> 00:23:55.590 align:start position:0% <00:23:53.720>really <00:23:53.827>great. <00:23:53.935>So, <00:23:54.043>you <00:23:54.150>can <00:23:54.258>just <00:23:54.366>disallow <00:23:54.473>a <00:23:54.581>specific <00:23:54.689>kind <00:23:54.796>of <00:23:54.904>models <00:23:55.012>of <00:23:55.120>your 00:23:55.590 --> 00:23:55.600 align:start position:0% <00:23:55.590>a <00:23:55.591>specific <00:23:55.592>kind <00:23:55.594>of <00:23:55.596>models <00:23:55.597>of <00:23:55.599>your 00:23:55.600 --> 00:23:57.630 align:start position:0% <00:23:55.600>a <00:23:55.727>specific <00:23:55.854>kind <00:23:55.981>of <00:23:56.109>models <00:23:56.236>of <00:23:56.363>your <00:23:56.490>authenticator. <00:23:56.618>You <00:23:56.745>could <00:23:56.872>for <00:23:57.000>instance 00:23:57.630 --> 00:23:57.640 align:start position:0% <00:23:57.630>authenticator. <00:23:57.632>You <00:23:57.634>could <00:23:57.636>for <00:23:57.639>instance 00:23:57.640 --> 00:23:59.790 align:start position:0% <00:23:57.640>authenticator. <00:23:57.795>You <00:23:57.951>could <00:23:58.106>for <00:23:58.262>instance <00:23:58.417>disallow <00:23:58.573>Windows <00:23:58.728>Hello, <00:23:58.884>you <00:23:59.040>could 00:23:59.790 --> 00:23:59.800 align:start position:0% <00:23:59.790>disallow <00:23:59.792>Windows <00:23:59.794>Hello, <00:23:59.796>you <00:23:59.799>could 00:23:59.800 --> 00:24:02.150 align:start position:0% <00:23:59.800>disallow <00:23:59.975>Windows <00:24:00.149>Hello, <00:24:00.325>you <00:24:00.500>could <00:24:00.675>disallow <00:24:00.850>iCloud <00:24:01.024>keychain <00:24:01.200>authenticator 00:24:02.150 --> 00:24:02.160 align:start position:0% <00:24:02.150>disallow <00:24:02.153>iCloud <00:24:02.156>keychain <00:24:02.159>authenticator 00:24:02.160 --> 00:24:03.430 align:start position:0% <00:24:02.160>disallow <00:24:02.388>iCloud <00:24:02.617>keychain <00:24:02.845>authenticator <00:24:03.074>or <00:24:03.303>whatnot. 00:24:03.430 --> 00:24:03.440 align:start position:0% <00:24:03.430>or <00:24:03.439>whatnot. 00:24:03.440 --> 00:24:07.030 align:start position:0% <00:24:03.440>or <00:24:03.615>whatnot. <00:24:03.790>Um <00:24:03.965>and <00:24:04.140>maybe <00:24:04.315>you <00:24:04.490>just <00:24:04.665>allow <00:24:04.840>UbiKeys. 00:24:07.030 --> 00:24:07.040 align:start position:0% <00:24:07.030>Um <00:24:07.031>and <00:24:07.033>maybe <00:24:07.034>you <00:24:07.036>just <00:24:07.037>allow <00:24:07.039>UbiKeys. 00:24:07.040 --> 00:24:09.830 align:start position:0% <00:24:07.040>Um <00:24:07.147>and <00:24:07.255>maybe <00:24:07.363>you <00:24:07.470>just <00:24:07.578>allow <00:24:07.686>UbiKeys. <00:24:07.793>But <00:24:07.901>you <00:24:08.009>can <00:24:08.116>do <00:24:08.224>this <00:24:08.332>uh <00:24:08.440>uh 00:24:09.830 --> 00:24:09.840 align:start position:0% <00:24:09.830>But <00:24:09.831>you <00:24:09.832>can <00:24:09.834>do <00:24:09.836>this <00:24:09.837>uh <00:24:09.839>uh 00:24:09.840 --> 00:24:12.030 align:start position:0% <00:24:09.840>But <00:24:09.956>you <00:24:10.073>can <00:24:10.189>do <00:24:10.306>this <00:24:10.423>uh <00:24:10.540>uh <00:24:10.656>depending <00:24:10.773>on <00:24:10.889>your <00:24:11.006>own <00:24:11.123>security <00:24:11.240>guideline 00:24:12.030 --> 00:24:12.040 align:start position:0% <00:24:12.030>depending <00:24:12.031>on <00:24:12.033>your <00:24:12.035>own <00:24:12.037>security <00:24:12.039>guideline 00:24:12.040 --> 00:24:17.030 align:start position:0% <00:24:12.040>depending <00:24:12.167>on <00:24:12.294>your <00:24:12.421>own <00:24:12.549>security <00:24:12.676>guideline <00:24:12.803>what <00:24:12.930>you <00:24:13.058>have <00:24:13.185>in <00:24:13.312>your <00:24:13.440>company. 00:24:17.040 --> 00:24:18.710 align:start position:0% <00:24:17.040>Just <00:24:17.320>another <00:24:17.600>example <00:24:17.879>like <00:24:18.159>for <00:24:18.440>instance 00:24:18.710 --> 00:24:18.720 align:start position:0% <00:24:18.710>Just <00:24:18.711>another <00:24:18.713>example <00:24:18.715>like <00:24:18.717>for <00:24:18.719>instance 00:24:18.720 --> 00:24:20.670 align:start position:0% <00:24:18.720>Just <00:24:18.836>another <00:24:18.953>example <00:24:19.070>like <00:24:19.186>for <00:24:19.303>instance <00:24:19.420>this <00:24:19.536>kind <00:24:19.653>of <00:24:19.770>GUID <00:24:19.886>means <00:24:20.003>maybe <00:24:20.120>basically 00:24:20.670 --> 00:24:20.680 align:start position:0% <00:24:20.670>this <00:24:20.671>kind <00:24:20.673>of <00:24:20.674>GUID <00:24:20.676>means <00:24:20.677>maybe <00:24:20.679>basically 00:24:20.680 --> 00:24:22.710 align:start position:0% <00:24:20.680>this <00:24:20.787>kind <00:24:20.895>of <00:24:21.003>GUID <00:24:21.110>means <00:24:21.218>maybe <00:24:21.326>basically <00:24:21.433>Windows <00:24:21.541>Hello <00:24:21.649>and <00:24:21.756>this <00:24:21.864>kind <00:24:21.972>of <00:24:22.080>GUID 00:24:22.710 --> 00:24:22.720 align:start position:0% <00:24:22.710>Windows <00:24:22.711>Hello <00:24:22.713>and <00:24:22.714>this <00:24:22.716>kind <00:24:22.717>of <00:24:22.719>GUID 00:24:22.720 --> 00:24:24.550 align:start position:0% <00:24:22.720>Windows <00:24:22.827>Hello <00:24:22.935>and <00:24:23.043>this <00:24:23.150>kind <00:24:23.258>of <00:24:23.366>GUID <00:24:23.473>means <00:24:23.581>Apple <00:24:23.689>Touch <00:24:23.796>ID. <00:24:23.904>It's <00:24:24.012>really <00:24:24.120>a 00:24:24.550 --> 00:24:24.560 align:start position:0% <00:24:24.550>means <00:24:24.551>Apple <00:24:24.553>Touch <00:24:24.554>ID. <00:24:24.556>It's <00:24:24.557>really <00:24:24.559>a 00:24:24.560 --> 00:24:26.310 align:start position:0% <00:24:24.560>means <00:24:24.735>Apple <00:24:24.909>Touch <00:24:25.085>ID. <00:24:25.260>It's <00:24:25.435>really <00:24:25.610>a <00:24:25.784>unique <00:24:25.960>identifier 00:24:26.310 --> 00:24:26.320 align:start position:0% <00:24:26.310>unique <00:24:26.319>identifier 00:24:26.320 --> 00:24:28.230 align:start position:0% <00:24:26.320>unique <00:24:26.520>identifier <00:24:26.720>basically <00:24:26.919>to <00:24:27.120>tell <00:24:27.320>what <00:24:27.520>kind <00:24:27.720>of 00:24:28.230 --> 00:24:28.240 align:start position:0% <00:24:28.230>basically <00:24:28.231>to <00:24:28.233>tell <00:24:28.235>what <00:24:28.237>kind <00:24:28.239>of 00:24:28.240 --> 00:24:31.110 align:start position:0% <00:24:28.240>basically <00:24:28.395>to <00:24:28.551>tell <00:24:28.706>what <00:24:28.862>kind <00:24:29.017>of <00:24:29.173>authenticator <00:24:29.328>model <00:24:29.484>this <00:24:29.640>is. 00:24:31.110 --> 00:24:31.120 align:start position:0% <00:24:31.110>authenticator <00:24:31.112>model <00:24:31.116>this <00:24:31.119>is. 00:24:31.120 --> 00:24:34.550 align:start position:0% <00:24:31.120>authenticator <00:24:31.294>model <00:24:31.469>this <00:24:31.645>is. <00:24:31.820>Last <00:24:31.995>but <00:24:32.169>not <00:24:32.344>least, <00:24:32.520>um 00:24:34.550 --> 00:24:34.560 align:start position:0% <00:24:34.550>Last <00:24:34.552>but <00:24:34.554>not <00:24:34.556>least, <00:24:34.559>um 00:24:34.560 --> 00:24:37.590 align:start position:0% <00:24:34.560>Last <00:24:34.676>but <00:24:34.793>not <00:24:34.909>least, <00:24:35.026>um <00:24:35.143>just <00:24:35.260>try <00:24:35.376>to <00:24:35.493>explain <00:24:35.610>your <00:24:35.726>users <00:24:35.843>as <00:24:35.960>good 00:24:37.590 --> 00:24:37.600 align:start position:0% <00:24:37.590>just <00:24:37.591>try <00:24:37.592>to <00:24:37.593>explain <00:24:37.595>your <00:24:37.596>users <00:24:37.597>as <00:24:37.599>good 00:24:37.600 --> 00:24:39.550 align:start position:0% <00:24:37.600>just <00:24:37.699>try <00:24:37.800>to <00:24:37.899>explain <00:24:38.000>your <00:24:38.100>users <00:24:38.199>as <00:24:38.300>good <00:24:38.399>as <00:24:38.500>possible <00:24:38.600>that <00:24:38.699>you <00:24:38.800>should <00:24:38.899>not <00:24:39.000>use 00:24:39.550 --> 00:24:39.560 align:start position:0% <00:24:39.550>as <00:24:39.551>possible <00:24:39.553>that <00:24:39.554>you <00:24:39.556>should <00:24:39.557>not <00:24:39.559>use 00:24:39.560 --> 00:24:42.230 align:start position:0% <00:24:39.560>as <00:24:39.735>possible <00:24:39.909>that <00:24:40.085>you <00:24:40.260>should <00:24:40.435>not <00:24:40.610>use <00:24:40.784>passwords <00:24:40.960>anymore. 00:24:42.230 --> 00:24:42.240 align:start position:0% <00:24:42.230>passwords <00:24:42.239>anymore. 00:24:42.240 --> 00:24:45.110 align:start position:0% <00:24:42.240>passwords <00:24:42.415>anymore. <00:24:42.590>If <00:24:42.765>you <00:24:42.940>still <00:24:43.115>have <00:24:43.290>passwords <00:24:43.465>active <00:24:43.640>for 00:24:45.110 --> 00:24:45.120 align:start position:0% <00:24:45.110>If <00:24:45.111>you <00:24:45.112>still <00:24:45.114>have <00:24:45.116>passwords <00:24:45.117>active <00:24:45.119>for 00:24:45.120 --> 00:24:47.630 align:start position:0% <00:24:45.120>If <00:24:45.227>you <00:24:45.335>still <00:24:45.443>have <00:24:45.550>passwords <00:24:45.658>active <00:24:45.766>for <00:24:45.873>long <00:24:45.981>long <00:24:46.089>time, <00:24:46.196>that's <00:24:46.304>the <00:24:46.412>weakest <00:24:46.520>link 00:24:47.630 --> 00:24:47.640 align:start position:0% <00:24:47.630>long <00:24:47.631>long <00:24:47.633>time, <00:24:47.634>that's <00:24:47.636>the <00:24:47.637>weakest <00:24:47.639>link 00:24:47.640 --> 00:24:49.750 align:start position:0% <00:24:47.640>long <00:24:47.747>long <00:24:47.855>time, <00:24:47.963>that's <00:24:48.070>the <00:24:48.178>weakest <00:24:48.286>link <00:24:48.393>in <00:24:48.501>your <00:24:48.609>application. <00:24:48.716>I <00:24:48.824>mean, <00:24:48.932>of <00:24:49.040>course 00:24:49.750 --> 00:24:49.760 align:start position:0% <00:24:49.750>in <00:24:49.751>your <00:24:49.753>application. <00:24:49.754>I <00:24:49.756>mean, <00:24:49.757>of <00:24:49.759>course 00:24:49.760 --> 00:24:51.750 align:start position:0% <00:24:49.760>in <00:24:49.867>your <00:24:49.975>application. <00:24:50.083>I <00:24:50.190>mean, <00:24:50.298>of <00:24:50.406>course <00:24:50.513>you <00:24:50.621>can <00:24:50.729>enable <00:24:50.836>passkeys <00:24:50.944>and <00:24:51.052>you <00:24:51.160>can 00:24:51.750 --> 00:24:51.760 align:start position:0% <00:24:51.750>you <00:24:51.751>can <00:24:51.753>enable <00:24:51.754>passkeys <00:24:51.756>and <00:24:51.757>you <00:24:51.759>can 00:24:51.760 --> 00:24:54.350 align:start position:0% <00:24:51.760>you <00:24:51.853>can <00:24:51.946>enable <00:24:52.040>passkeys <00:24:52.133>and <00:24:52.226>you <00:24:52.320>can <00:24:52.413>leave <00:24:52.506>the <00:24:52.600>user <00:24:52.693>in <00:24:52.786>a <00:24:52.879>state <00:24:52.973>where <00:24:53.066>the <00:24:53.160>user 00:24:54.350 --> 00:24:54.360 align:start position:0% <00:24:54.350>leave <00:24:54.351>the <00:24:54.352>user <00:24:54.353>in <00:24:54.354>a <00:24:54.355>state <00:24:54.356>where <00:24:54.357>the <00:24:54.359>user 00:24:54.360 --> 00:24:57.230 align:start position:0% <00:24:54.360>leave <00:24:54.453>the <00:24:54.546>user <00:24:54.639>in <00:24:54.733>a <00:24:54.826>state <00:24:54.919>where <00:24:55.013>the <00:24:55.106>user <00:24:55.199>can <00:24:55.293>can <00:24:55.386>choose <00:24:55.479>both, <00:24:55.573>but <00:24:55.666>just <00:24:55.760>enforce 00:24:57.230 --> 00:24:57.240 align:start position:0% <00:24:57.230>can <00:24:57.231>can <00:24:57.233>choose <00:24:57.234>both, <00:24:57.236>but <00:24:57.237>just <00:24:57.239>enforce 00:24:57.240 --> 00:25:00.190 align:start position:0% <00:24:57.240>can <00:24:57.347>can <00:24:57.455>choose <00:24:57.563>both, <00:24:57.670>but <00:24:57.778>just <00:24:57.886>enforce <00:24:57.993>it. <00:24:58.101>Just <00:24:58.209>give <00:24:58.316>it <00:24:58.424>some <00:24:58.532>transition <00:24:58.640>time. 00:25:00.190 --> 00:25:00.200 align:start position:0% <00:25:00.190>it. <00:25:00.191>Just <00:25:00.193>give <00:25:00.194>it <00:25:00.196>some <00:25:00.197>transition <00:25:00.199>time. 00:25:00.200 --> 00:25:03.230 align:start position:0% <00:25:00.200>it. <00:25:00.300>Just <00:25:00.400>give <00:25:00.500>it <00:25:00.600>some <00:25:00.700>transition <00:25:00.800>time. <00:25:00.900>But <00:25:01.000>in <00:25:01.100>in <00:25:01.200>my <00:25:01.300>experience, <00:25:01.400>I <00:25:01.500>I <00:25:01.600>helped 00:25:03.230 --> 00:25:03.240 align:start position:0% <00:25:03.230>But <00:25:03.231>in <00:25:03.232>in <00:25:03.233>my <00:25:03.235>experience, <00:25:03.236>I <00:25:03.237>I <00:25:03.239>helped 00:25:03.240 --> 00:25:05.110 align:start position:0% <00:25:03.240>But <00:25:03.356>in <00:25:03.473>in <00:25:03.590>my <00:25:03.706>experience, <00:25:03.823>I <00:25:03.940>I <00:25:04.056>helped <00:25:04.173>already <00:25:04.290>a <00:25:04.406>couple <00:25:04.523>of <00:25:04.640>companies 00:25:05.110 --> 00:25:05.120 align:start position:0% <00:25:05.110>already <00:25:05.112>a <00:25:05.114>couple <00:25:05.116>of <00:25:05.119>companies 00:25:05.120 --> 00:25:07.150 align:start position:0% <00:25:05.120>already <00:25:05.353>a <00:25:05.586>couple <00:25:05.820>of <00:25:06.053>companies <00:25:06.286>integrating <00:25:06.520>passkeys 00:25:07.150 --> 00:25:07.160 align:start position:0% <00:25:07.150>integrating <00:25:07.159>passkeys 00:25:07.160 --> 00:25:09.110 align:start position:0% <00:25:07.160>integrating <00:25:07.335>passkeys <00:25:07.510>and <00:25:07.685>consulting <00:25:07.860>over <00:25:08.035>there. <00:25:08.210>But <00:25:08.385>the <00:25:08.560>most 00:25:09.110 --> 00:25:09.120 align:start position:0% <00:25:09.110>and <00:25:09.111>consulting <00:25:09.112>over <00:25:09.114>there. <00:25:09.116>But <00:25:09.117>the <00:25:09.119>most 00:25:09.120 --> 00:25:11.630 align:start position:0% <00:25:09.120>and <00:25:09.260>consulting <00:25:09.399>over <00:25:09.540>there. <00:25:09.679>But <00:25:09.820>the <00:25:09.959>most <00:25:10.100>important <00:25:10.239>thing <00:25:10.379>is <00:25:10.520>actually 00:25:11.630 --> 00:25:11.640 align:start position:0% <00:25:11.630>important <00:25:11.633>thing <00:25:11.636>is <00:25:11.639>actually 00:25:11.640 --> 00:25:14.190 align:start position:0% <00:25:11.640>important <00:25:11.795>thing <00:25:11.951>is <00:25:12.106>actually <00:25:12.262>giving <00:25:12.417>an <00:25:12.573>exploration <00:25:12.728>why <00:25:12.884>you <00:25:13.040>now 00:25:14.190 --> 00:25:14.200 align:start position:0% <00:25:14.190>giving <00:25:14.191>an <00:25:14.193>exploration <00:25:14.195>why <00:25:14.197>you <00:25:14.199>now 00:25:14.200 --> 00:25:16.750 align:start position:0% <00:25:14.200>giving <00:25:14.400>an <00:25:14.600>exploration <00:25:14.800>why <00:25:15.000>you <00:25:15.200>now <00:25:15.400>enforce <00:25:15.600>passkeys. 00:25:16.750 --> 00:25:16.760 align:start position:0% <00:25:16.750>enforce <00:25:16.759>passkeys. 00:25:16.760 --> 00:25:19.230 align:start position:0% <00:25:16.760>enforce <00:25:16.900>passkeys. <00:25:17.040>I <00:25:17.180>know <00:25:17.320>with <00:25:17.460>a <00:25:17.600>passkey, <00:25:17.740>it's <00:25:17.879>not <00:25:18.020>so <00:25:18.160>easy 00:25:19.230 --> 00:25:19.240 align:start position:0% <00:25:19.230>I <00:25:19.231>know <00:25:19.232>with <00:25:19.233>a <00:25:19.234>passkey, <00:25:19.235>it's <00:25:19.236>not <00:25:19.237>so <00:25:19.239>easy 00:25:19.240 --> 00:25:21.190 align:start position:0% <00:25:19.240>I <00:25:19.333>know <00:25:19.426>with <00:25:19.520>a <00:25:19.613>passkey, <00:25:19.706>it's <00:25:19.800>not <00:25:19.893>so <00:25:19.986>easy <00:25:20.080>to <00:25:20.173>share <00:25:20.266>it <00:25:20.360>on <00:25:20.453>WhatsApp <00:25:20.546>anymore. <00:25:20.640>Maybe 00:25:21.190 --> 00:25:21.200 align:start position:0% <00:25:21.190>to <00:25:21.191>share <00:25:21.193>it <00:25:21.194>on <00:25:21.196>WhatsApp <00:25:21.197>anymore. <00:25:21.199>Maybe 00:25:21.200 --> 00:25:23.270 align:start position:0% <00:25:21.200>to <00:25:21.300>share <00:25:21.400>it <00:25:21.500>on <00:25:21.600>WhatsApp <00:25:21.700>anymore. <00:25:21.800>Maybe <00:25:21.900>your <00:25:22.000>Netflix <00:25:22.100>password <00:25:22.200>to <00:25:22.300>just <00:25:22.400>post <00:25:22.500>it <00:25:22.600>on 00:25:23.270 --> 00:25:23.280 align:start position:0% <00:25:23.270>your <00:25:23.271>Netflix <00:25:23.272>password <00:25:23.273>to <00:25:23.275>just <00:25:23.276>post <00:25:23.277>it <00:25:23.279>on 00:25:23.280 --> 00:25:24.750 align:start position:0% <00:25:23.280>your <00:25:23.381>Netflix <00:25:23.483>password <00:25:23.585>to <00:25:23.687>just <00:25:23.788>post <00:25:23.890>it <00:25:23.992>on <00:25:24.094>WhatsApp <00:25:24.195>because <00:25:24.297>some <00:25:24.399>of <00:25:24.501>your <00:25:24.603>friends 00:25:24.750 --> 00:25:24.760 align:start position:0% <00:25:24.750>WhatsApp <00:25:24.751>because <00:25:24.753>some <00:25:24.755>of <00:25:24.757>your <00:25:24.759>friends 00:25:24.760 --> 00:25:27.110 align:start position:0% <00:25:24.760>WhatsApp <00:25:24.900>because <00:25:25.040>some <00:25:25.180>of <00:25:25.320>your <00:25:25.460>friends <00:25:25.600>also <00:25:25.740>want <00:25:25.879>to <00:25:26.020>share <00:25:26.160>your 00:25:27.110 --> 00:25:27.120 align:start position:0% <00:25:27.110>also <00:25:27.112>want <00:25:27.114>to <00:25:27.116>share <00:25:27.119>your 00:25:27.120 --> 00:25:29.550 align:start position:0% <00:25:27.120>also <00:25:27.353>want <00:25:27.586>to <00:25:27.820>share <00:25:28.053>your <00:25:28.286>Netflix <00:25:28.520>account. 00:25:29.550 --> 00:25:29.560 align:start position:0% <00:25:29.550>Netflix <00:25:29.559>account. 00:25:29.560 --> 00:25:31.430 align:start position:0% <00:25:29.560>Netflix <00:25:29.715>account. <00:25:29.871>But <00:25:30.026>we <00:25:30.182>all <00:25:30.337>know <00:25:30.493>we <00:25:30.648>shouldn't <00:25:30.804>do <00:25:30.960>that. 00:25:31.430 --> 00:25:31.440 align:start position:0% <00:25:31.430>But <00:25:31.431>we <00:25:31.432>all <00:25:31.433>know <00:25:31.435>we <00:25:31.436>shouldn't <00:25:31.437>do <00:25:31.439>that. 00:25:31.440 --> 00:25:34.950 align:start position:0% <00:25:31.440>But <00:25:31.527>we <00:25:31.615>all <00:25:31.702>know <00:25:31.790>we <00:25:31.877>shouldn't <00:25:31.965>do <00:25:32.052>that. <00:25:32.140>So, <00:25:32.227>tell <00:25:32.315>that <00:25:32.402>to <00:25:32.490>your <00:25:32.577>users <00:25:32.665>and <00:25:32.752>let <00:25:32.840>this 00:25:34.950 --> 00:25:34.960 align:start position:0% <00:25:34.950>So, <00:25:34.951>tell <00:25:34.952>that <00:25:34.953>to <00:25:34.954>your <00:25:34.955>users <00:25:34.956>and <00:25:34.957>let <00:25:34.959>this 00:25:34.960 --> 00:25:38.030 align:start position:0% <00:25:34.960>So, <00:25:35.067>tell <00:25:35.175>that <00:25:35.283>to <00:25:35.390>your <00:25:35.498>users <00:25:35.606>and <00:25:35.713>let <00:25:35.821>this <00:25:35.929>whole <00:25:36.036>thing <00:25:36.144>finally <00:25:36.252>fade <00:25:36.360>out. 00:25:38.030 --> 00:25:38.040 align:start position:0% <00:25:38.030>whole <00:25:38.032>thing <00:25:38.034>finally <00:25:38.036>fade <00:25:38.039>out. 00:25:38.040 --> 00:25:40.430 align:start position:0% <00:25:38.040>whole <00:25:38.180>thing <00:25:38.320>finally <00:25:38.460>fade <00:25:38.600>out. <00:25:38.740>There's <00:25:38.879>just <00:25:39.020>one <00:25:39.159>thing <00:25:39.300>that <00:25:39.440>passkeys 00:25:40.430 --> 00:25:40.440 align:start position:0% <00:25:40.430>There's <00:25:40.431>just <00:25:40.433>one <00:25:40.435>thing <00:25:40.437>that <00:25:40.439>passkeys 00:25:40.440 --> 00:25:42.510 align:start position:0% <00:25:40.440>There's <00:25:40.556>just <00:25:40.673>one <00:25:40.790>thing <00:25:40.906>that <00:25:41.023>passkeys <00:25:41.140>doesn't <00:25:41.256>solve <00:25:41.373>and <00:25:41.490>this <00:25:41.606>is <00:25:41.723>the <00:25:41.840>account 00:25:42.510 --> 00:25:42.520 align:start position:0% <00:25:42.510>doesn't <00:25:42.511>solve <00:25:42.513>and <00:25:42.514>this <00:25:42.516>is <00:25:42.517>the <00:25:42.519>account 00:25:42.520 --> 00:25:44.030 align:start position:0% <00:25:42.520>doesn't <00:25:42.714>solve <00:25:42.908>and <00:25:43.102>this <00:25:43.296>is <00:25:43.490>the <00:25:43.684>account <00:25:43.879>recovery. 00:25:44.030 --> 00:25:44.040 align:start position:0% recovery. 00:25:44.040 --> 00:25:47.030 align:start position:0% <00:25:44.040>recovery. <00:25:44.389>So, <00:25:44.740>there <00:25:45.090>are <00:25:45.440>people 00:25:47.030 --> 00:25:47.040 align:start position:0% <00:25:47.030>So, <00:25:47.033>there <00:25:47.036>are <00:25:47.039>people 00:25:47.040 --> 00:25:49.350 align:start position:0% <00:25:47.040>So, <00:25:47.180>there <00:25:47.320>are <00:25:47.460>people <00:25:47.600>There <00:25:47.740>are <00:25:47.879>people <00:25:48.020>who <00:25:48.159>are <00:25:48.300>telling <00:25:48.440>you 00:25:49.350 --> 00:25:49.360 align:start position:0% <00:25:49.350>There <00:25:49.351>are <00:25:49.352>people <00:25:49.354>who <00:25:49.356>are <00:25:49.357>telling <00:25:49.359>you 00:25:49.360 --> 00:25:52.470 align:start position:0% <00:25:49.360>There <00:25:49.453>are <00:25:49.546>people <00:25:49.639>who <00:25:49.733>are <00:25:49.826>telling <00:25:49.919>you <00:25:50.013>Yes, <00:25:50.106>if <00:25:50.199>you <00:25:50.293>let's <00:25:50.386>say <00:25:50.479>you <00:25:50.573>have <00:25:50.666>a <00:25:50.760>passkey 00:25:52.470 --> 00:25:52.480 align:start position:0% <00:25:52.470>Yes, <00:25:52.471>if <00:25:52.472>you <00:25:52.473>let's <00:25:52.474>say <00:25:52.475>you <00:25:52.476>have <00:25:52.477>a <00:25:52.479>passkey 00:25:52.480 --> 00:25:54.550 align:start position:0% <00:25:52.480>Yes, <00:25:52.567>if <00:25:52.655>you <00:25:52.742>let's <00:25:52.830>say <00:25:52.917>you <00:25:53.005>have <00:25:53.092>a <00:25:53.180>passkey <00:25:53.267>on <00:25:53.355>a <00:25:53.442>YubiKey <00:25:53.530>and <00:25:53.617>then <00:25:53.705>you <00:25:53.792>lose <00:25:53.880>your 00:25:54.550 --> 00:25:54.560 align:start position:0% <00:25:54.550>on <00:25:54.551>a <00:25:54.552>YubiKey <00:25:54.553>and <00:25:54.555>then <00:25:54.556>you <00:25:54.557>lose <00:25:54.559>your 00:25:54.560 --> 00:25:55.750 align:start position:0% <00:25:54.560>on <00:25:54.693>a <00:25:54.827>YubiKey <00:25:54.961>and <00:25:55.095>then <00:25:55.229>you <00:25:55.363>lose <00:25:55.497>your <00:25:55.631>YubiKey, 00:25:55.750 --> 00:25:55.760 align:start position:0% YubiKey, 00:25:55.760 --> 00:25:57.430 align:start position:0% <00:25:55.760>YubiKey, <00:25:55.935>then <00:25:56.110>we <00:25:56.285>are <00:25:56.460>screwed <00:25:56.635>because <00:25:56.810>we <00:25:56.985>can't <00:25:57.160>log 00:25:57.430 --> 00:25:57.440 align:start position:0% <00:25:57.430>then <00:25:57.431>we <00:25:57.432>are <00:25:57.433>screwed <00:25:57.435>because <00:25:57.436>we <00:25:57.437>can't <00:25:57.439>log 00:25:57.440 --> 00:25:59.470 align:start position:0% <00:25:57.440>then <00:25:57.567>we <00:25:57.694>are <00:25:57.821>screwed <00:25:57.949>because <00:25:58.076>we <00:25:58.203>can't <00:25:58.330>log <00:25:58.458>in <00:25:58.585>anymore, <00:25:58.712>of <00:25:58.840>course. 00:25:59.470 --> 00:25:59.480 align:start position:0% <00:25:59.470>in <00:25:59.473>anymore, <00:25:59.476>of <00:25:59.479>course. 00:25:59.480 --> 00:26:00.950 align:start position:0% <00:25:59.480>in <00:25:59.612>anymore, <00:25:59.744>of <00:25:59.876>course. <00:26:00.009>So, <00:26:00.141>there <00:26:00.273>are <00:26:00.406>people <00:26:00.538>telling <00:26:00.670>you <00:26:00.803>yes, 00:26:00.950 --> 00:26:00.960 align:start position:0% <00:26:00.950>So, <00:26:00.951>there <00:26:00.953>are <00:26:00.954>people <00:26:00.956>telling <00:26:00.957>you <00:26:00.959>yes, 00:26:00.960 --> 00:26:03.590 align:start position:0% <00:26:00.960>So, <00:26:01.060>there <00:26:01.160>are <00:26:01.260>people <00:26:01.360>telling <00:26:01.460>you <00:26:01.560>yes, <00:26:01.660>but <00:26:01.760>you <00:26:01.860>should <00:26:01.960>then <00:26:02.060>maybe <00:26:02.160>having <00:26:02.260>like <00:26:02.360>a 00:26:03.590 --> 00:26:03.600 align:start position:0% <00:26:03.590>but <00:26:03.591>you <00:26:03.592>should <00:26:03.593>then <00:26:03.595>maybe <00:26:03.596>having <00:26:03.597>like <00:26:03.599>a 00:26:03.600 --> 00:26:05.430 align:start position:0% <00:26:03.600>but <00:26:03.755>you <00:26:03.911>should <00:26:04.066>then <00:26:04.222>maybe <00:26:04.377>having <00:26:04.533>like <00:26:04.688>a <00:26:04.844>second <00:26:05.000>YubiKey 00:26:05.430 --> 00:26:05.440 align:start position:0% <00:26:05.430>second <00:26:05.439>YubiKey 00:26:05.440 --> 00:26:07.750 align:start position:0% <00:26:05.440>second <00:26:05.615>YubiKey <00:26:05.790>and <00:26:05.965>like <00:26:06.140>two <00:26:06.315>passkeys. <00:26:06.490>Of <00:26:06.665>course, <00:26:06.840>you 00:26:07.750 --> 00:26:07.760 align:start position:0% <00:26:07.750>and <00:26:07.751>like <00:26:07.753>two <00:26:07.754>passkeys. <00:26:07.756>Of <00:26:07.757>course, <00:26:07.759>you 00:26:07.760 --> 00:26:10.470 align:start position:0% <00:26:07.760>and <00:26:07.867>like <00:26:07.975>two <00:26:08.083>passkeys. <00:26:08.190>Of <00:26:08.298>course, <00:26:08.406>you <00:26:08.513>can <00:26:08.621>add <00:26:08.729>multiple <00:26:08.836>passkeys <00:26:08.944>to <00:26:09.052>to <00:26:09.160>an 00:26:10.470 --> 00:26:10.480 align:start position:0% <00:26:10.470>can <00:26:10.471>add <00:26:10.473>multiple <00:26:10.474>passkeys <00:26:10.476>to <00:26:10.477>to <00:26:10.479>an 00:26:10.480 --> 00:26:13.270 align:start position:0% <00:26:10.480>can <00:26:10.596>add <00:26:10.713>multiple <00:26:10.830>passkeys <00:26:10.946>to <00:26:11.063>to <00:26:11.180>an <00:26:11.296>account. <00:26:11.413>So, <00:26:11.530>the <00:26:11.646>other <00:26:11.763>YubiKey <00:26:11.880>is 00:26:13.270 --> 00:26:13.280 align:start position:0% <00:26:13.270>account. <00:26:13.271>So, <00:26:13.273>the <00:26:13.275>other <00:26:13.277>YubiKey <00:26:13.279>is 00:26:13.280 --> 00:26:15.150 align:start position:0% <00:26:13.280>account. <00:26:13.407>So, <00:26:13.534>the <00:26:13.661>other <00:26:13.789>YubiKey <00:26:13.916>is <00:26:14.043>basically <00:26:14.170>your <00:26:14.298>fallback <00:26:14.425>YubiKey. <00:26:14.552>So, <00:26:14.680>you 00:26:15.150 --> 00:26:15.160 align:start position:0% <00:26:15.150>basically <00:26:15.151>your <00:26:15.153>fallback <00:26:15.155>YubiKey. <00:26:15.157>So, <00:26:15.159>you 00:26:15.160 --> 00:26:17.630 align:start position:0% <00:26:15.160>basically <00:26:15.267>your <00:26:15.375>fallback <00:26:15.483>YubiKey. <00:26:15.590>So, <00:26:15.698>you <00:26:15.806>store <00:26:15.913>it <00:26:16.021>somewhere <00:26:16.129>at <00:26:16.236>home <00:26:16.344>in <00:26:16.452>in <00:26:16.560>a 00:26:17.630 --> 00:26:17.640 align:start position:0% <00:26:17.630>store <00:26:17.631>it <00:26:17.632>somewhere <00:26:17.633>at <00:26:17.635>home <00:26:17.636>in <00:26:17.637>in <00:26:17.639>a 00:26:17.640 --> 00:26:19.430 align:start position:0% <00:26:17.640>store <00:26:17.740>it <00:26:17.840>somewhere <00:26:17.940>at <00:26:18.040>home <00:26:18.140>in <00:26:18.240>in <00:26:18.340>a <00:26:18.440>secret <00:26:18.540>place. <00:26:18.640>So, <00:26:18.740>when <00:26:18.840>you <00:26:18.940>lose <00:26:19.040>the 00:26:19.430 --> 00:26:19.440 align:start position:0% <00:26:19.430>secret <00:26:19.431>place. <00:26:19.433>So, <00:26:19.434>when <00:26:19.436>you <00:26:19.437>lose <00:26:19.439>the 00:26:19.440 --> 00:26:21.070 align:start position:0% <00:26:19.440>secret <00:26:19.547>place. <00:26:19.655>So, <00:26:19.763>when <00:26:19.870>you <00:26:19.978>lose <00:26:20.086>the <00:26:20.193>first <00:26:20.301>YubiKey, <00:26:20.409>you <00:26:20.516>at <00:26:20.624>least <00:26:20.732>have <00:26:20.840>the 00:26:21.070 --> 00:26:21.080 align:start position:0% <00:26:21.070>first <00:26:21.071>YubiKey, <00:26:21.072>you <00:26:21.074>at <00:26:21.076>least <00:26:21.077>have <00:26:21.079>the 00:26:21.080 --> 00:26:22.590 align:start position:0% <00:26:21.080>first <00:26:21.249>YubiKey, <00:26:21.419>you <00:26:21.589>at <00:26:21.759>least <00:26:21.929>have <00:26:22.099>the <00:26:22.269>second <00:26:22.438>one. 00:26:22.590 --> 00:26:22.600 align:start position:0% <00:26:22.590>second <00:26:22.599>one. 00:26:22.600 --> 00:26:25.950 align:start position:0% <00:26:22.600>second <00:26:22.727>one. <00:26:22.854>This <00:26:22.981>is <00:26:23.109>a <00:26:23.236>suggestion <00:26:23.363>I <00:26:23.490>you <00:26:23.618>maybe <00:26:23.745>I <00:26:23.872>I <00:26:24.000>I 00:26:25.950 --> 00:26:25.960 align:start position:0% <00:26:25.950>This <00:26:25.951>is <00:26:25.952>a <00:26:25.953>suggestion <00:26:25.954>I <00:26:25.955>you <00:26:25.956>maybe <00:26:25.957>I <00:26:25.958>I <00:26:25.959>I 00:26:25.960 --> 00:26:27.750 align:start position:0% <00:26:25.960>This <00:26:26.042>is <00:26:26.124>a <00:26:26.207>suggestion <00:26:26.289>I <00:26:26.371>you <00:26:26.454>maybe <00:26:26.536>I <00:26:26.618>I <00:26:26.701>I <00:26:26.783>read <00:26:26.865>a <00:26:26.948>lot, <00:26:27.030>but <00:26:27.112>this <00:26:27.195>is <00:26:27.277>not <00:26:27.360>really 00:26:27.750 --> 00:26:27.760 align:start position:0% <00:26:27.750>read <00:26:27.751>a <00:26:27.752>lot, <00:26:27.753>but <00:26:27.755>this <00:26:27.756>is <00:26:27.757>not <00:26:27.759>really 00:26:27.760 --> 00:26:29.510 align:start position:0% <00:26:27.760>read <00:26:27.935>a <00:26:28.110>lot, <00:26:28.285>but <00:26:28.460>this <00:26:28.635>is <00:26:28.810>not <00:26:28.985>really <00:26:29.160>practical. 00:26:29.510 --> 00:26:29.520 align:start position:0% practical. 00:26:29.520 --> 00:26:31.870 align:start position:0% <00:26:29.520>practical. <00:26:29.753>So, <00:26:29.986>the <00:26:30.220>same <00:26:30.453>let's <00:26:30.686>say <00:26:30.920>recovery 00:26:31.870 --> 00:26:31.880 align:start position:0% <00:26:31.870>So, <00:26:31.871>the <00:26:31.873>same <00:26:31.875>let's <00:26:31.877>say <00:26:31.879>recovery 00:26:31.880 --> 00:26:34.190 align:start position:0% <00:26:31.880>So, <00:26:32.020>the <00:26:32.160>same <00:26:32.300>let's <00:26:32.440>say <00:26:32.580>recovery <00:26:32.720>strategies <00:26:32.860>or <00:26:33.000>fallback <00:26:33.140>strategies <00:26:33.280>that 00:26:34.190 --> 00:26:34.200 align:start position:0% <00:26:34.190>strategies <00:26:34.192>or <00:26:34.194>fallback <00:26:34.196>strategies <00:26:34.199>that 00:26:34.200 --> 00:26:36.550 align:start position:0% <00:26:34.200>strategies <00:26:34.327>or <00:26:34.454>fallback <00:26:34.581>strategies <00:26:34.709>that <00:26:34.836>apply <00:26:34.963>to <00:26:35.090>password <00:26:35.218>kind <00:26:35.345>of <00:26:35.472>applies <00:26:35.600>here 00:26:36.550 --> 00:26:36.560 align:start position:0% <00:26:36.550>apply <00:26:36.551>to <00:26:36.553>password <00:26:36.554>kind <00:26:36.556>of <00:26:36.557>applies <00:26:36.559>here 00:26:36.560 --> 00:26:39.590 align:start position:0% <00:26:36.560>apply <00:26:36.667>to <00:26:36.775>password <00:26:36.883>kind <00:26:36.990>of <00:26:37.098>applies <00:26:37.206>here <00:26:37.313>as <00:26:37.421>well. <00:26:37.529>Usually, <00:26:37.636>maybe <00:26:37.744>having <00:26:37.852>a <00:26:37.960>magic 00:26:39.590 --> 00:26:39.600 align:start position:0% <00:26:39.590>as <00:26:39.591>well. <00:26:39.592>Usually, <00:26:39.594>maybe <00:26:39.596>having <00:26:39.597>a <00:26:39.599>magic 00:26:39.600 --> 00:26:42.350 align:start position:0% <00:26:39.600>as <00:26:39.707>well. <00:26:39.815>Usually, <00:26:39.923>maybe <00:26:40.030>having <00:26:40.138>a <00:26:40.246>magic <00:26:40.353>link, <00:26:40.461>a <00:26:40.569>one-time <00:26:40.676>link <00:26:40.784>sending <00:26:40.892>towards <00:26:41.000>a 00:26:42.350 --> 00:26:42.360 align:start position:0% <00:26:42.350>link, <00:26:42.351>a <00:26:42.352>one-time <00:26:42.354>link <00:26:42.356>sending <00:26:42.357>towards <00:26:42.359>a 00:26:42.360 --> 00:26:44.630 align:start position:0% <00:26:42.360>link, <00:26:42.476>a <00:26:42.593>one-time <00:26:42.709>link <00:26:42.826>sending <00:26:42.943>towards <00:26:43.060>a <00:26:43.176>verified <00:26:43.293>email <00:26:43.409>address <00:26:43.526>where <00:26:43.643>the <00:26:43.760>user 00:26:44.630 --> 00:26:44.640 align:start position:0% <00:26:44.630>verified <00:26:44.631>email <00:26:44.633>address <00:26:44.635>where <00:26:44.637>the <00:26:44.639>user 00:26:44.640 --> 00:26:46.590 align:start position:0% <00:26:44.640>verified <00:26:44.747>email <00:26:44.855>address <00:26:44.963>where <00:26:45.070>the <00:26:45.178>user <00:26:45.286>basically <00:26:45.393>can <00:26:45.501>click <00:26:45.609>on <00:26:45.716>it <00:26:45.824>and <00:26:45.932>then, <00:26:46.040>of 00:26:46.590 --> 00:26:46.600 align:start position:0% <00:26:46.590>basically <00:26:46.591>can <00:26:46.592>click <00:26:46.593>on <00:26:46.595>it <00:26:46.596>and <00:26:46.597>then, <00:26:46.599>of 00:26:46.600 --> 00:26:48.030 align:start position:0% <00:26:46.600>basically <00:26:46.760>can <00:26:46.921>click <00:26:47.082>on <00:26:47.243>it <00:26:47.404>and <00:26:47.565>then, <00:26:47.726>of <00:26:47.887>course, 00:26:48.030 --> 00:26:48.040 align:start position:0% course, 00:26:48.040 --> 00:26:49.670 align:start position:0% <00:26:48.040>course, <00:26:48.240>deleting <00:26:48.440>the <00:26:48.639>old <00:26:48.840>one, <00:26:49.040>telling <00:26:49.240>yes, <00:26:49.440>the 00:26:49.670 --> 00:26:49.680 align:start position:0% <00:26:49.670>deleting <00:26:49.671>the <00:26:49.673>old <00:26:49.674>one, <00:26:49.676>telling <00:26:49.677>yes, <00:26:49.679>the 00:26:49.680 --> 00:26:52.070 align:start position:0% <00:26:49.680>deleting <00:26:49.780>the <00:26:49.880>old <00:26:49.980>one, <00:26:50.080>telling <00:26:50.180>yes, <00:26:50.280>the <00:26:50.380>old <00:26:50.480>one <00:26:50.580>should <00:26:50.680>be <00:26:50.780>revoked <00:26:50.880>and <00:26:50.980>adding <00:26:51.080>a 00:26:52.070 --> 00:26:52.080 align:start position:0% <00:26:52.070>old <00:26:52.071>one <00:26:52.072>should <00:26:52.073>be <00:26:52.075>revoked <00:26:52.076>and <00:26:52.077>adding <00:26:52.079>a 00:26:52.080 --> 00:26:54.710 align:start position:0% <00:26:52.080>old <00:26:52.235>one <00:26:52.391>should <00:26:52.546>be <00:26:52.702>revoked <00:26:52.857>and <00:26:53.013>adding <00:26:53.168>a <00:26:53.324>new <00:26:53.480>passkey. 00:26:54.710 --> 00:26:54.720 align:start position:0% <00:26:54.710>new <00:26:54.719>passkey. 00:26:54.720 --> 00:26:57.910 align:start position:0% <00:26:54.720>new <00:26:54.895>passkey. <00:26:55.070>So, <00:26:55.245>slowly <00:26:55.420>coming <00:26:55.595>to <00:26:55.770>an <00:26:55.945>end, <00:26:56.120>summarizing 00:26:57.910 --> 00:26:57.920 align:start position:0% <00:26:57.910>So, <00:26:57.911>slowly <00:26:57.913>coming <00:26:57.914>to <00:26:57.916>an <00:26:57.917>end, <00:26:57.919>summarizing 00:26:57.920 --> 00:27:00.630 align:start position:0% <00:26:57.920>So, <00:26:58.036>slowly <00:26:58.153>coming <00:26:58.270>to <00:26:58.386>an <00:26:58.503>end, <00:26:58.620>summarizing <00:26:58.736>the <00:26:58.853>what <00:26:58.970>I <00:26:59.086>called <00:26:59.203>integration <00:26:59.320>checklist, 00:27:00.630 --> 00:27:00.640 align:start position:0% <00:27:00.630>the <00:27:00.631>what <00:27:00.633>I <00:27:00.635>called <00:27:00.637>integration <00:27:00.639>checklist, 00:27:00.640 --> 00:27:02.510 align:start position:0% <00:27:00.640>the <00:27:00.756>what <00:27:00.873>I <00:27:00.990>called <00:27:01.106>integration <00:27:01.223>checklist, <00:27:01.340>we <00:27:01.456>have <00:27:01.573>those <00:27:01.690>four <00:27:01.806>things <00:27:01.923>I <00:27:02.040>just 00:27:02.510 --> 00:27:02.520 align:start position:0% <00:27:02.510>we <00:27:02.511>have <00:27:02.513>those <00:27:02.514>four <00:27:02.516>things <00:27:02.517>I <00:27:02.519>just 00:27:02.520 --> 00:27:05.270 align:start position:0% <00:27:02.520>we <00:27:02.627>have <00:27:02.735>those <00:27:02.843>four <00:27:02.950>things <00:27:03.058>I <00:27:03.166>just <00:27:03.273>mentioned, <00:27:03.381>some <00:27:03.489>kind <00:27:03.596>of <00:27:03.704>pitfalls. <00:27:03.812>Um <00:27:03.920>we 00:27:05.270 --> 00:27:05.280 align:start position:0% <00:27:05.270>mentioned, <00:27:05.271>some <00:27:05.273>kind <00:27:05.274>of <00:27:05.276>pitfalls. <00:27:05.277>Um <00:27:05.279>we 00:27:05.280 --> 00:27:06.910 align:start position:0% <00:27:05.280>mentioned, <00:27:05.480>some <00:27:05.680>kind <00:27:05.879>of <00:27:06.080>pitfalls. <00:27:06.280>Um <00:27:06.480>we <00:27:06.680>learn 00:27:06.910 --> 00:27:06.920 align:start position:0% learn 00:27:06.920 --> 00:27:09.190 align:start position:0% <00:27:06.920>learn <00:27:07.095>about <00:27:07.270>the <00:27:07.445>relying <00:27:07.620>party <00:27:07.795>ID, <00:27:07.970>it's <00:27:08.145>not <00:27:08.320>so 00:27:09.190 --> 00:27:09.200 align:start position:0% <00:27:09.190>about <00:27:09.191>the <00:27:09.192>relying <00:27:09.193>party <00:27:09.195>ID, <00:27:09.196>it's <00:27:09.197>not <00:27:09.199>so 00:27:09.200 --> 00:27:12.310 align:start position:0% <00:27:09.200>about <00:27:09.293>the <00:27:09.386>relying <00:27:09.480>party <00:27:09.573>ID, <00:27:09.666>it's <00:27:09.760>not <00:27:09.853>so <00:27:09.946>easy <00:27:10.040>to <00:27:10.133>just <00:27:10.226>determine <00:27:10.320>um <00:27:10.413>it, <00:27:10.506>but <00:27:10.600>make 00:27:12.310 --> 00:27:12.320 align:start position:0% <00:27:12.310>easy <00:27:12.311>to <00:27:12.312>just <00:27:12.313>determine <00:27:12.315>um <00:27:12.316>it, <00:27:12.317>but <00:27:12.319>make 00:27:12.320 --> 00:27:15.270 align:start position:0% <00:27:12.320>easy <00:27:12.419>to <00:27:12.520>just <00:27:12.620>determine <00:27:12.720>um <00:27:12.820>it, <00:27:12.919>but <00:27:13.020>make <00:27:13.120>it <00:27:13.220>as <00:27:13.320>strict <00:27:13.419>as <00:27:13.520>possible. <00:27:13.620>Just <00:27:13.720>use 00:27:15.270 --> 00:27:15.280 align:start position:0% <00:27:15.270>it <00:27:15.271>as <00:27:15.273>strict <00:27:15.274>as <00:27:15.276>possible. <00:27:15.277>Just <00:27:15.279>use 00:27:15.280 --> 00:27:17.870 align:start position:0% <00:27:15.280>it <00:27:15.387>as <00:27:15.495>strict <00:27:15.603>as <00:27:15.710>possible. <00:27:15.818>Just <00:27:15.926>use <00:27:16.033>Epic's <00:27:16.141>domain <00:27:16.249>from <00:27:16.356>the <00:27:16.464>start. <00:27:16.572>If <00:27:16.680>you 00:27:17.870 --> 00:27:17.880 align:start position:0% <00:27:17.870>Epic's <00:27:17.871>domain <00:27:17.873>from <00:27:17.874>the <00:27:17.876>start. <00:27:17.877>If <00:27:17.879>you 00:27:17.880 --> 00:27:20.070 align:start position:0% <00:27:17.880>Epic's <00:27:17.996>domain <00:27:18.113>from <00:27:18.230>the <00:27:18.346>start. <00:27:18.463>If <00:27:18.580>you <00:27:18.696>need <00:27:18.813>it, <00:27:18.930>maybe <00:27:19.046>for <00:27:19.163>some <00:27:19.280>redirection 00:27:20.070 --> 00:27:20.080 align:start position:0% <00:27:20.070>need <00:27:20.071>it, <00:27:20.073>maybe <00:27:20.075>for <00:27:20.077>some <00:27:20.079>redirection 00:27:20.080 --> 00:27:21.390 align:start position:0% <00:27:20.080>need <00:27:20.276>it, <00:27:20.473>maybe <00:27:20.669>for <00:27:20.866>some <00:27:21.062>redirection <00:27:21.259>purposes. 00:27:21.390 --> 00:27:21.400 align:start position:0% purposes. 00:27:21.400 --> 00:27:25.110 align:start position:0% <00:27:21.400>purposes. <00:27:21.575>Um <00:27:21.750>but <00:27:21.925>then <00:27:22.100>keep <00:27:22.275>your <00:27:22.450>DNS <00:27:22.625>records <00:27:22.800>clean, 00:27:25.110 --> 00:27:25.120 align:start position:0% <00:27:25.110>Um <00:27:25.111>but <00:27:25.112>then <00:27:25.113>keep <00:27:25.115>your <00:27:25.116>DNS <00:27:25.117>records <00:27:25.119>clean, 00:27:25.120 --> 00:27:26.750 align:start position:0% <00:27:25.120>Um <00:27:25.219>but <00:27:25.320>then <00:27:25.419>keep <00:27:25.520>your <00:27:25.620>DNS <00:27:25.719>records <00:27:25.820>clean, <00:27:25.919>and <00:27:26.020>and <00:27:26.120>make <00:27:26.219>sure <00:27:26.320>that <00:27:26.419>a <00:27:26.520>dangling 00:27:26.750 --> 00:27:26.760 align:start position:0% <00:27:26.750>and <00:27:26.751>and <00:27:26.753>make <00:27:26.754>sure <00:27:26.756>that <00:27:26.757>a <00:27:26.759>dangling 00:27:26.760 --> 00:27:29.430 align:start position:0% <00:27:26.760>and <00:27:26.900>and <00:27:27.040>make <00:27:27.180>sure <00:27:27.320>that <00:27:27.460>a <00:27:27.600>dangling <00:27:27.740>subdomain <00:27:27.879>will <00:27:28.020>not <00:27:28.160>happen. 00:27:29.430 --> 00:27:29.440 align:start position:0% <00:27:29.430>subdomain <00:27:29.433>will <00:27:29.436>not <00:27:29.439>happen. 00:27:29.440 --> 00:27:30.910 align:start position:0% <00:27:29.440>subdomain <00:27:29.587>will <00:27:29.734>not <00:27:29.881>happen. <00:27:30.028>Set <00:27:30.175>for <00:27:30.322>you <00:27:30.469>uh <00:27:30.616>enforce <00:27:30.763>user 00:27:30.910 --> 00:27:30.920 align:start position:0% <00:27:30.910>Set <00:27:30.911>for <00:27:30.913>you <00:27:30.915>uh <00:27:30.917>enforce <00:27:30.919>user 00:27:30.920 --> 00:27:33.350 align:start position:0% <00:27:30.920>Set <00:27:31.095>for <00:27:31.270>you <00:27:31.445>uh <00:27:31.620>enforce <00:27:31.795>user <00:27:31.970>verification. <00:27:32.145>Validate <00:27:32.320>as 00:27:33.350 --> 00:27:33.360 align:start position:0% <00:27:33.350>verification. <00:27:33.354>Validate <00:27:33.359>as 00:27:33.360 --> 00:27:35.870 align:start position:0% <00:27:33.360>verification. <00:27:33.534>Validate <00:27:33.709>as <00:27:33.885>attestation. <00:27:34.060>This <00:27:34.235>is <00:27:34.409>basically <00:27:34.584>like <00:27:34.760>one 00:27:35.870 --> 00:27:35.880 align:start position:0% <00:27:35.870>attestation. <00:27:35.871>This <00:27:35.873>is <00:27:35.875>basically <00:27:35.877>like <00:27:35.879>one 00:27:35.880 --> 00:27:40.030 align:start position:0% <00:27:35.880>attestation. <00:27:35.996>This <00:27:36.113>is <00:27:36.230>basically <00:27:36.346>like <00:27:36.463>one <00:27:36.580>of <00:27:36.696>my <00:27:36.813>most <00:27:36.930>crucial <00:27:37.046>part <00:27:37.163>over <00:27:37.280>here. 00:27:40.030 --> 00:27:40.040 align:start position:0% <00:27:40.030>of <00:27:40.031>my <00:27:40.033>most <00:27:40.034>crucial <00:27:40.036>part <00:27:40.037>over <00:27:40.039>here. 00:27:40.040 --> 00:27:43.870 align:start position:0% <00:27:40.040>of <00:27:40.147>my <00:27:40.255>most <00:27:40.363>crucial <00:27:40.470>part <00:27:40.578>over <00:27:40.686>here. <00:27:40.793>You <00:27:40.901>your <00:27:41.009>application <00:27:41.116>is <00:27:41.224>way <00:27:41.332>more <00:27:41.440>secure 00:27:43.870 --> 00:27:43.880 align:start position:0% <00:27:43.870>You <00:27:43.871>your <00:27:43.873>application <00:27:43.874>is <00:27:43.876>way <00:27:43.877>more <00:27:43.879>secure 00:27:43.880 --> 00:27:45.390 align:start position:0% <00:27:43.880>You <00:27:43.984>your <00:27:44.089>application <00:27:44.193>is <00:27:44.298>way <00:27:44.402>more <00:27:44.507>secure <00:27:44.611>if <00:27:44.716>you <00:27:44.820>know <00:27:44.925>exactly <00:27:45.029>what <00:27:45.134>kind <00:27:45.239>of 00:27:45.390 --> 00:27:45.400 align:start position:0% <00:27:45.390>if <00:27:45.391>you <00:27:45.393>know <00:27:45.394>exactly <00:27:45.396>what <00:27:45.397>kind <00:27:45.399>of 00:27:45.400 --> 00:27:47.990 align:start position:0% <00:27:45.400>if <00:27:45.516>you <00:27:45.633>know <00:27:45.750>exactly <00:27:45.866>what <00:27:45.983>kind <00:27:46.100>of <00:27:46.216>authenticator <00:27:46.333>is <00:27:46.450>used, <00:27:46.566>and <00:27:46.683>maybe <00:27:46.800>to 00:27:47.990 --> 00:27:48.000 align:start position:0% <00:27:47.990>authenticator <00:27:47.991>is <00:27:47.993>used, <00:27:47.995>and <00:27:47.997>maybe <00:27:47.999>to 00:27:48.000 --> 00:27:50.870 align:start position:0% <00:27:48.000>authenticator <00:27:48.107>is <00:27:48.215>used, <00:27:48.323>and <00:27:48.430>maybe <00:27:48.538>to <00:27:48.646>disallow <00:27:48.753>some <00:27:48.861>of <00:27:48.969>those <00:27:49.076>older <00:27:49.184>ones <00:27:49.292>or <00:27:49.400>not 00:27:50.870 --> 00:27:50.880 align:start position:0% <00:27:50.870>disallow <00:27:50.871>some <00:27:50.872>of <00:27:50.873>those <00:27:50.875>older <00:27:50.876>ones <00:27:50.877>or <00:27:50.879>not 00:27:50.880 --> 00:27:53.230 align:start position:0% <00:27:50.880>disallow <00:27:50.987>some <00:27:51.095>of <00:27:51.203>those <00:27:51.310>older <00:27:51.418>ones <00:27:51.526>or <00:27:51.633>not <00:27:51.741>secure <00:27:51.849>ones, <00:27:51.956>basically. <00:27:52.064>And <00:27:52.172>of <00:27:52.280>course, 00:27:53.230 --> 00:27:53.240 align:start position:0% <00:27:53.230>secure <00:27:53.231>ones, <00:27:53.233>basically. <00:27:53.235>And <00:27:53.237>of <00:27:53.239>course, 00:27:53.240 --> 00:27:55.030 align:start position:0% <00:27:53.240>secure <00:27:53.415>ones, <00:27:53.590>basically. <00:27:53.765>And <00:27:53.940>of <00:27:54.115>course, <00:27:54.290>let <00:27:54.465>password-based <00:27:54.640>authentication 00:27:55.030 --> 00:27:55.040 align:start position:0% <00:27:55.030>let <00:27:55.034>password-based <00:27:55.039>authentication 00:27:55.040 --> 00:27:57.150 align:start position:0% <00:27:55.040>let <00:27:55.320>password-based <00:27:55.600>authentication <00:27:55.879>finally <00:27:56.159>fade <00:27:56.440>out. 00:27:57.150 --> 00:27:57.160 align:start position:0% <00:27:57.150>finally <00:27:57.154>fade <00:27:57.159>out. 00:27:57.160 --> 00:27:59.710 align:start position:0% <00:27:57.160>finally <00:27:57.335>fade <00:27:57.510>out. <00:27:57.685>A <00:27:57.860>couple <00:27:58.035>of <00:27:58.210>more <00:27:58.385>recommendations, <00:27:58.560>um 00:27:59.710 --> 00:27:59.720 align:start position:0% <00:27:59.710>A <00:27:59.711>couple <00:27:59.713>of <00:27:59.715>more <00:27:59.717>recommendations, <00:27:59.719>um 00:27:59.720 --> 00:28:02.310 align:start position:0% <00:27:59.720>A <00:27:59.860>couple <00:28:00.000>of <00:28:00.140>more <00:28:00.280>recommendations, <00:28:00.420>um <00:28:00.560>like <00:28:00.700>highlighting <00:28:00.840>to <00:28:00.980>mention, <00:28:01.120>is 00:28:02.310 --> 00:28:02.320 align:start position:0% <00:28:02.310>like <00:28:02.312>highlighting <00:28:02.314>to <00:28:02.316>mention, <00:28:02.319>is 00:28:02.320 --> 00:28:04.350 align:start position:0% <00:28:02.320>like <00:28:02.475>highlighting <00:28:02.631>to <00:28:02.786>mention, <00:28:02.942>is <00:28:03.097>basically <00:28:03.253>creating <00:28:03.408>this <00:28:03.564>whitelist <00:28:03.720>of 00:28:04.350 --> 00:28:04.360 align:start position:0% <00:28:04.350>basically <00:28:04.352>creating <00:28:04.354>this <00:28:04.356>whitelist <00:28:04.359>of 00:28:04.360 --> 00:28:06.670 align:start position:0% <00:28:04.360>basically <00:28:04.515>creating <00:28:04.671>this <00:28:04.826>whitelist <00:28:04.982>of <00:28:05.137>authenticators, <00:28:05.293>which <00:28:05.448>makes <00:28:05.604>lot <00:28:05.760>of 00:28:06.670 --> 00:28:06.680 align:start position:0% <00:28:06.670>authenticators, <00:28:06.672>which <00:28:06.674>makes <00:28:06.676>lot <00:28:06.679>of 00:28:06.680 --> 00:28:09.950 align:start position:0% <00:28:06.680>authenticators, <00:28:06.820>which <00:28:06.960>makes <00:28:07.100>lot <00:28:07.240>of <00:28:07.380>sense. <00:28:07.520>It's <00:28:07.660>like <00:28:07.800>a <00:28:07.940>whitelist <00:28:08.080>um 00:28:09.950 --> 00:28:09.960 align:start position:0% <00:28:09.950>sense. <00:28:09.951>It's <00:28:09.953>like <00:28:09.955>a <00:28:09.957>whitelist <00:28:09.959>um 00:28:09.960 --> 00:28:11.670 align:start position:0% <00:28:09.960>sense. <00:28:10.076>It's <00:28:10.193>like <00:28:10.310>a <00:28:10.426>whitelist <00:28:10.543>um <00:28:10.660>like <00:28:10.776>for <00:28:10.893>redirect <00:28:11.010>URIs <00:28:11.126>when <00:28:11.243>when <00:28:11.360>you 00:28:11.670 --> 00:28:11.680 align:start position:0% <00:28:11.670>like <00:28:11.671>for <00:28:11.673>redirect <00:28:11.674>URIs <00:28:11.676>when <00:28:11.677>when <00:28:11.679>you 00:28:11.680 --> 00:28:13.550 align:start position:0% <00:28:11.680>like <00:28:11.787>for <00:28:11.895>redirect <00:28:12.003>URIs <00:28:12.110>when <00:28:12.218>when <00:28:12.326>you <00:28:12.433>know <00:28:12.541>in <00:28:12.649>in <00:28:12.756>OAuth, <00:28:12.864>basically <00:28:12.972>it's <00:28:13.080>really 00:28:13.550 --> 00:28:13.560 align:start position:0% <00:28:13.550>know <00:28:13.551>in <00:28:13.553>in <00:28:13.554>OAuth, <00:28:13.556>basically <00:28:13.557>it's <00:28:13.559>really 00:28:13.560 --> 00:28:15.550 align:start position:0% <00:28:13.560>know <00:28:13.735>in <00:28:13.909>in <00:28:14.085>OAuth, <00:28:14.260>basically <00:28:14.435>it's <00:28:14.610>really <00:28:14.784>really <00:28:14.960>great. 00:28:15.550 --> 00:28:15.560 align:start position:0% <00:28:15.550>really <00:28:15.559>great. 00:28:15.560 --> 00:28:17.630 align:start position:0% <00:28:15.560>really <00:28:15.760>great. <00:28:15.960>Another <00:28:16.159>thing <00:28:16.360>I <00:28:16.560>haven't <00:28:16.760>emphasized <00:28:16.960>so 00:28:17.630 --> 00:28:17.640 align:start position:0% <00:28:17.630>Another <00:28:17.631>thing <00:28:17.633>I <00:28:17.635>haven't <00:28:17.637>emphasized <00:28:17.639>so 00:28:17.640 --> 00:28:19.270 align:start position:0% <00:28:17.640>Another <00:28:17.815>thing <00:28:17.990>I <00:28:18.165>haven't <00:28:18.340>emphasized <00:28:18.515>so <00:28:18.690>much, <00:28:18.865>but <00:28:19.040>um 00:28:19.270 --> 00:28:19.280 align:start position:0% <00:28:19.270>much, <00:28:19.274>but <00:28:19.279>um 00:28:19.280 --> 00:28:22.230 align:start position:0% <00:28:19.280>much, <00:28:19.420>but <00:28:19.560>um <00:28:19.700>what <00:28:19.840>you <00:28:19.980>also <00:28:20.120>could <00:28:20.260>do <00:28:20.399>is <00:28:20.540>just <00:28:20.680>enforcing 00:28:22.230 --> 00:28:22.240 align:start position:0% <00:28:22.230>what <00:28:22.231>you <00:28:22.232>also <00:28:22.233>could <00:28:22.235>do <00:28:22.236>is <00:28:22.237>just <00:28:22.239>enforcing 00:28:22.240 --> 00:28:24.910 align:start position:0% <00:28:22.240>what <00:28:22.347>you <00:28:22.455>also <00:28:22.563>could <00:28:22.670>do <00:28:22.778>is <00:28:22.886>just <00:28:22.993>enforcing <00:28:23.101>device-bounded <00:28:23.209>passkeys. <00:28:23.316>So, <00:28:23.424>in <00:28:23.532>the <00:28:23.640>the 00:28:24.910 --> 00:28:24.920 align:start position:0% <00:28:24.910>device-bounded <00:28:24.911>passkeys. <00:28:24.913>So, <00:28:24.915>in <00:28:24.917>the <00:28:24.919>the 00:28:24.920 --> 00:28:27.310 align:start position:0% <00:28:24.920>device-bounded <00:28:25.075>passkeys. <00:28:25.231>So, <00:28:25.386>in <00:28:25.542>the <00:28:25.697>the <00:28:25.853>FIDO2 <00:28:26.008>standard, <00:28:26.164>there <00:28:26.320>is 00:28:27.310 --> 00:28:27.320 align:start position:0% <00:28:27.310>FIDO2 <00:28:27.312>standard, <00:28:27.316>there <00:28:27.319>is 00:28:27.320 --> 00:28:29.310 align:start position:0% <00:28:27.320>FIDO2 <00:28:27.495>standard, <00:28:27.669>there <00:28:27.845>is <00:28:28.020>somehow <00:28:28.195>the <00:28:28.370>terms <00:28:28.544>device-bounded <00:28:28.720>and 00:28:29.310 --> 00:28:29.320 align:start position:0% <00:28:29.310>somehow <00:28:29.312>the <00:28:29.314>terms <00:28:29.316>device-bounded <00:28:29.319>and 00:28:29.320 --> 00:28:31.470 align:start position:0% <00:28:29.320>somehow <00:28:29.475>the <00:28:29.631>terms <00:28:29.786>device-bounded <00:28:29.942>and <00:28:30.097>sync <00:28:30.253>passkeys. <00:28:30.408>Sync <00:28:30.564>passkeys, <00:28:30.720>for 00:28:31.470 --> 00:28:31.480 align:start position:0% <00:28:31.470>sync <00:28:31.472>passkeys. <00:28:31.474>Sync <00:28:31.476>passkeys, <00:28:31.479>for 00:28:31.480 --> 00:28:33.310 align:start position:0% <00:28:31.480>sync <00:28:31.620>passkeys. <00:28:31.760>Sync <00:28:31.900>passkeys, <00:28:32.040>for <00:28:32.180>instance, <00:28:32.320>as <00:28:32.460>you <00:28:32.600>maybe <00:28:32.740>already <00:28:32.880>also 00:28:33.310 --> 00:28:33.320 align:start position:0% <00:28:33.310>instance, <00:28:33.311>as <00:28:33.313>you <00:28:33.315>maybe <00:28:33.317>already <00:28:33.319>also 00:28:33.320 --> 00:28:35.670 align:start position:0% <00:28:33.320>instance, <00:28:33.427>as <00:28:33.535>you <00:28:33.643>maybe <00:28:33.750>already <00:28:33.858>also <00:28:33.966>heard <00:28:34.073>the <00:28:34.181>term, <00:28:34.289>is <00:28:34.396>in <00:28:34.504>the <00:28:34.612>act <00:28:34.720>of 00:28:35.670 --> 00:28:35.680 align:start position:0% <00:28:35.670>heard <00:28:35.671>the <00:28:35.672>term, <00:28:35.673>is <00:28:35.675>in <00:28:35.676>the <00:28:35.677>act <00:28:35.679>of 00:28:35.680 --> 00:28:38.070 align:start position:0% <00:28:35.680>heard <00:28:35.787>the <00:28:35.895>term, <00:28:36.003>is <00:28:36.110>in <00:28:36.218>the <00:28:36.326>act <00:28:36.433>of <00:28:36.541>keychain, <00:28:36.649>maybe <00:28:36.756>putting <00:28:36.864>your <00:28:36.972>private <00:28:37.080>key 00:28:38.070 --> 00:28:38.080 align:start position:0% <00:28:38.070>keychain, <00:28:38.071>maybe <00:28:38.073>putting <00:28:38.075>your <00:28:38.077>private <00:28:38.079>key 00:28:38.080 --> 00:28:40.550 align:start position:0% <00:28:38.080>keychain, <00:28:38.187>maybe <00:28:38.295>putting <00:28:38.403>your <00:28:38.510>private <00:28:38.618>key <00:28:38.726>in <00:28:38.833>C <00:28:38.941>drive <00:28:39.049>and <00:28:39.156>whatnot, <00:28:39.264>to <00:28:39.372>have <00:28:39.480>this 00:28:40.550 --> 00:28:40.560 align:start position:0% <00:28:40.550>in <00:28:40.551>C <00:28:40.552>drive <00:28:40.553>and <00:28:40.555>whatnot, <00:28:40.556>to <00:28:40.557>have <00:28:40.559>this 00:28:40.560 --> 00:28:43.190 align:start position:0% <00:28:40.560>in <00:28:40.667>C <00:28:40.775>drive <00:28:40.883>and <00:28:40.990>whatnot, <00:28:41.098>to <00:28:41.206>have <00:28:41.313>this <00:28:41.421>kind <00:28:41.529>of <00:28:41.636>cross-platform. <00:28:41.744>Um <00:28:41.852>there <00:28:41.960>are 00:28:43.190 --> 00:28:43.200 align:start position:0% <00:28:43.190>kind <00:28:43.191>of <00:28:43.193>cross-platform. <00:28:43.195>Um <00:28:43.197>there <00:28:43.199>are 00:28:43.200 --> 00:28:44.670 align:start position:0% <00:28:43.200>kind <00:28:43.332>of <00:28:43.464>cross-platform. <00:28:43.596>Um <00:28:43.729>there <00:28:43.861>are <00:28:43.993>password <00:28:44.126>managers <00:28:44.258>who <00:28:44.390>are <00:28:44.523>already 00:28:44.670 --> 00:28:44.680 align:start position:0% <00:28:44.670>password <00:28:44.672>managers <00:28:44.674>who <00:28:44.676>are <00:28:44.679>already 00:28:44.680 --> 00:28:46.910 align:start position:0% <00:28:44.680>password <00:28:44.820>managers <00:28:44.960>who <00:28:45.100>are <00:28:45.240>already <00:28:45.380>enabling <00:28:45.520>the <00:28:45.660>support <00:28:45.800>of <00:28:45.940>passkeys, <00:28:46.080>but 00:28:46.910 --> 00:28:46.920 align:start position:0% <00:28:46.910>enabling <00:28:46.911>the <00:28:46.913>support <00:28:46.915>of <00:28:46.917>passkeys, <00:28:46.919>but 00:28:46.920 --> 00:28:48.870 align:start position:0% <00:28:46.920>enabling <00:28:47.020>the <00:28:47.120>support <00:28:47.220>of <00:28:47.320>passkeys, <00:28:47.420>but <00:28:47.520>most <00:28:47.620>of <00:28:47.720>the <00:28:47.820>times <00:28:47.920>you <00:28:48.020>start <00:28:48.120>this <00:28:48.220>kind <00:28:48.320>of 00:28:48.870 --> 00:28:48.880 align:start position:0% <00:28:48.870>most <00:28:48.871>of <00:28:48.872>the <00:28:48.873>times <00:28:48.874>you <00:28:48.875>start <00:28:48.876>this <00:28:48.877>kind <00:28:48.879>of 00:28:48.880 --> 00:28:51.030 align:start position:0% <00:28:48.880>most <00:28:48.973>of <00:28:49.066>the <00:28:49.160>times <00:28:49.253>you <00:28:49.346>start <00:28:49.440>this <00:28:49.533>kind <00:28:49.626>of <00:28:49.720>database <00:28:49.813>then <00:28:49.906>in <00:28:50.000>a <00:28:50.093>Google <00:28:50.186>Drive <00:28:50.280>or 00:28:51.030 --> 00:28:51.040 align:start position:0% <00:28:51.030>database <00:28:51.031>then <00:28:51.033>in <00:28:51.034>a <00:28:51.036>Google <00:28:51.037>Drive <00:28:51.039>or 00:28:51.040 --> 00:28:53.070 align:start position:0% <00:28:51.040>database <00:28:51.147>then <00:28:51.255>in <00:28:51.363>a <00:28:51.470>Google <00:28:51.578>Drive <00:28:51.686>or <00:28:51.793>OneDrive <00:28:51.901>or <00:28:52.009>whatnot. <00:28:52.116>This <00:28:52.224>is <00:28:52.332>what <00:28:52.440>we 00:28:53.070 --> 00:28:53.080 align:start position:0% <00:28:53.070>OneDrive <00:28:53.071>or <00:28:53.072>whatnot. <00:28:53.074>This <00:28:53.076>is <00:28:53.077>what <00:28:53.079>we 00:28:53.080 --> 00:28:55.070 align:start position:0% <00:28:53.080>OneDrive <00:28:53.179>or <00:28:53.280>whatnot. <00:28:53.379>This <00:28:53.480>is <00:28:53.580>what <00:28:53.679>we <00:28:53.780>call <00:28:53.879>sync <00:28:53.980>pass <00:28:54.080>keys <00:28:54.179>because <00:28:54.280>we <00:28:54.379>want <00:28:54.480>to 00:28:55.070 --> 00:28:55.080 align:start position:0% <00:28:55.070>call <00:28:55.071>sync <00:28:55.072>pass <00:28:55.073>keys <00:28:55.075>because <00:28:55.076>we <00:28:55.077>want <00:28:55.079>to 00:28:55.080 --> 00:28:57.910 align:start position:0% <00:28:55.080>call <00:28:55.196>sync <00:28:55.313>pass <00:28:55.429>keys <00:28:55.546>because <00:28:55.663>we <00:28:55.780>want <00:28:55.896>to <00:28:56.013>use <00:28:56.129>them <00:28:56.246>in <00:28:56.363>all <00:28:56.480>devices. 00:28:57.910 --> 00:28:57.920 align:start position:0% <00:28:57.910>use <00:28:57.912>them <00:28:57.914>in <00:28:57.916>all <00:28:57.919>devices. 00:28:57.920 --> 00:29:00.110 align:start position:0% <00:28:57.920>use <00:28:58.095>them <00:28:58.270>in <00:28:58.445>all <00:28:58.620>devices. <00:28:58.795>This <00:28:58.970>is <00:28:59.145>of <00:28:59.320>course 00:29:00.110 --> 00:29:00.120 align:start position:0% <00:29:00.110>This <00:29:00.112>is <00:29:00.116>of <00:29:00.119>course 00:29:00.120 --> 00:29:02.110 align:start position:0% <00:29:00.120>This <00:29:00.320>is <00:29:00.520>of <00:29:00.719>course <00:29:00.919>not <00:29:01.120>the <00:29:01.320>best <00:29:01.520>way 00:29:02.110 --> 00:29:02.120 align:start position:0% <00:29:02.110>not <00:29:02.112>the <00:29:02.116>best <00:29:02.119>way 00:29:02.120 --> 00:29:05.310 align:start position:0% <00:29:02.120>not <00:29:02.275>the <00:29:02.431>best <00:29:02.586>way <00:29:02.742>and <00:29:02.897>you <00:29:03.053>can <00:29:03.208>enforce <00:29:03.364>this <00:29:03.520>to 00:29:05.310 --> 00:29:05.320 align:start position:0% <00:29:05.310>and <00:29:05.311>you <00:29:05.313>can <00:29:05.315>enforce <00:29:05.317>this <00:29:05.319>to 00:29:05.320 --> 00:29:07.870 align:start position:0% <00:29:05.320>and <00:29:05.427>you <00:29:05.535>can <00:29:05.643>enforce <00:29:05.750>this <00:29:05.858>to <00:29:05.966>that <00:29:06.073>they <00:29:06.181>should <00:29:06.289>not <00:29:06.396>be <00:29:06.504>used. <00:29:06.612>You <00:29:06.720>can 00:29:07.870 --> 00:29:07.880 align:start position:0% <00:29:07.870>that <00:29:07.871>they <00:29:07.872>should <00:29:07.873>not <00:29:07.875>be <00:29:07.876>used. <00:29:07.877>You <00:29:07.879>can 00:29:07.880 --> 00:29:10.150 align:start position:0% <00:29:07.880>that <00:29:07.980>they <00:29:08.080>should <00:29:08.180>not <00:29:08.280>be <00:29:08.380>used. <00:29:08.480>You <00:29:08.580>can <00:29:08.680>enforce <00:29:08.780>just <00:29:08.880>device <00:29:08.980>bound <00:29:09.080>the <00:29:09.180>pass <00:29:09.280>keys. 00:29:10.150 --> 00:29:10.160 align:start position:0% <00:29:10.150>enforce <00:29:10.151>just <00:29:10.153>device <00:29:10.154>bound <00:29:10.156>the <00:29:10.157>pass <00:29:10.159>keys. 00:29:10.160 --> 00:29:11.430 align:start position:0% <00:29:10.160>enforce <00:29:10.241>just <00:29:10.323>device <00:29:10.404>bound <00:29:10.486>the <00:29:10.568>pass <00:29:10.649>keys. <00:29:10.731>In <00:29:10.813>Keycloak <00:29:10.894>to <00:29:10.976>be <00:29:11.058>fair, <00:29:11.139>it's <00:29:11.221>a <00:29:11.303>little 00:29:11.430 --> 00:29:11.440 align:start position:0% <00:29:11.430>In <00:29:11.431>Keycloak <00:29:11.432>to <00:29:11.433>be <00:29:11.435>fair, <00:29:11.436>it's <00:29:11.437>a <00:29:11.439>little 00:29:11.440 --> 00:29:14.790 align:start position:0% <00:29:11.440>In <00:29:11.533>Keycloak <00:29:11.626>to <00:29:11.720>be <00:29:11.813>fair, <00:29:11.906>it's <00:29:12.000>a <00:29:12.093>little <00:29:12.186>bit <00:29:12.280>trickier <00:29:12.373>to <00:29:12.466>to <00:29:12.560>to <00:29:12.653>enforce <00:29:12.746>this. <00:29:12.840>You 00:29:14.790 --> 00:29:14.800 align:start position:0% <00:29:14.790>bit <00:29:14.791>trickier <00:29:14.792>to <00:29:14.793>to <00:29:14.795>to <00:29:14.796>enforce <00:29:14.797>this. <00:29:14.799>You 00:29:14.800 --> 00:29:16.710 align:start position:0% <00:29:14.800>bit <00:29:14.893>trickier <00:29:14.986>to <00:29:15.080>to <00:29:15.173>to <00:29:15.266>enforce <00:29:15.360>this. <00:29:15.453>You <00:29:15.546>have <00:29:15.639>to <00:29:15.733>enable <00:29:15.826>a <00:29:15.919>couple <00:29:16.013>of <00:29:16.106>steps <00:29:16.200>and 00:29:16.710 --> 00:29:16.720 align:start position:0% <00:29:16.710>have <00:29:16.711>to <00:29:16.712>enable <00:29:16.713>a <00:29:16.715>couple <00:29:16.716>of <00:29:16.717>steps <00:29:16.719>and 00:29:16.720 --> 00:29:18.710 align:start position:0% <00:29:16.720>have <00:29:16.827>to <00:29:16.935>enable <00:29:17.043>a <00:29:17.150>couple <00:29:17.258>of <00:29:17.366>steps <00:29:17.473>and <00:29:17.581>then <00:29:17.689>click <00:29:17.796>a <00:29:17.904>couple <00:29:18.012>of <00:29:18.120>configurations, 00:29:18.710 --> 00:29:18.720 align:start position:0% <00:29:18.710>then <00:29:18.711>click <00:29:18.713>a <00:29:18.715>couple <00:29:18.717>of <00:29:18.719>configurations, 00:29:18.720 --> 00:29:20.750 align:start position:0% <00:29:18.720>then <00:29:18.860>click <00:29:19.000>a <00:29:19.140>couple <00:29:19.280>of <00:29:19.420>configurations, <00:29:19.560>but <00:29:19.700>you <00:29:19.840>can <00:29:19.980>enforce <00:29:20.120>that 00:29:20.750 --> 00:29:20.760 align:start position:0% <00:29:20.750>but <00:29:20.752>you <00:29:20.754>can <00:29:20.756>enforce <00:29:20.759>that 00:29:20.760 --> 00:29:22.710 align:start position:0% <00:29:20.760>but <00:29:20.887>you <00:29:21.014>can <00:29:21.141>enforce <00:29:21.269>that <00:29:21.396>to <00:29:21.523>have <00:29:21.650>maybe <00:29:21.778>just <00:29:21.905>UbiKeys, <00:29:22.032>to <00:29:22.160>maybe 00:29:22.710 --> 00:29:22.720 align:start position:0% <00:29:22.710>to <00:29:22.711>have <00:29:22.713>maybe <00:29:22.714>just <00:29:22.716>UbiKeys, <00:29:22.717>to <00:29:22.719>maybe 00:29:22.720 --> 00:29:24.510 align:start position:0% <00:29:22.720>to <00:29:22.895>have <00:29:23.070>maybe <00:29:23.245>just <00:29:23.420>UbiKeys, <00:29:23.595>to <00:29:23.770>maybe <00:29:23.945>just <00:29:24.120>have 00:29:24.510 --> 00:29:24.520 align:start position:0% <00:29:24.510>just <00:29:24.519>have 00:29:24.520 --> 00:29:26.550 align:start position:0% <00:29:24.520>just <00:29:24.753>have <00:29:24.986>authenticators <00:29:25.220>directly <00:29:25.453>on <00:29:25.686>your <00:29:25.920>machine 00:29:26.550 --> 00:29:26.560 align:start position:0% <00:29:26.550>authenticators <00:29:26.552>directly <00:29:26.554>on <00:29:26.556>your <00:29:26.559>machine 00:29:26.560 --> 00:29:28.390 align:start position:0% <00:29:26.560>authenticators <00:29:26.715>directly <00:29:26.871>on <00:29:27.026>your <00:29:27.182>machine <00:29:27.337>like <00:29:27.493>the <00:29:27.648>Android <00:29:27.804>authenticator, <00:29:27.960>the 00:29:28.390 --> 00:29:28.400 align:start position:0% <00:29:28.390>like <00:29:28.392>the <00:29:28.394>Android <00:29:28.396>authenticator, <00:29:28.399>the 00:29:28.400 --> 00:29:31.590 align:start position:0% <00:29:28.400>like <00:29:28.527>the <00:29:28.654>Android <00:29:28.781>authenticator, <00:29:28.909>the <00:29:29.036>TPMs, <00:29:29.163>or <00:29:29.290>stored <00:29:29.418>in <00:29:29.545>your <00:29:29.672>secure <00:29:29.800>enclave 00:29:31.590 --> 00:29:31.600 align:start position:0% <00:29:31.590>TPMs, <00:29:31.591>or <00:29:31.592>stored <00:29:31.594>in <00:29:31.596>your <00:29:31.597>secure <00:29:31.599>enclave 00:29:31.600 --> 00:29:35.350 align:start position:0% <00:29:31.600>TPMs, <00:29:31.755>or <00:29:31.911>stored <00:29:32.066>in <00:29:32.222>your <00:29:32.377>secure <00:29:32.533>enclave <00:29:32.688>on <00:29:32.844>iOS <00:29:33.000>devices. 00:29:35.360 --> 00:29:37.830 align:start position:0% <00:29:35.360>Check <00:29:35.709>your <00:29:36.060>cryptographic <00:29:36.409>algorithm <00:29:36.760>also 00:29:37.830 --> 00:29:37.840 align:start position:0% <00:29:37.830>Check <00:29:37.832>your <00:29:37.834>cryptographic <00:29:37.836>algorithm <00:29:37.839>also 00:29:37.840 --> 00:29:39.950 align:start position:0% <00:29:37.840>Check <00:29:38.014>your <00:29:38.189>cryptographic <00:29:38.365>algorithm <00:29:38.540>also <00:29:38.715>considering <00:29:38.889>maybe <00:29:39.064>already <00:29:39.240>post-quantum 00:29:39.950 --> 00:29:39.960 align:start position:0% <00:29:39.950>considering <00:29:39.953>maybe <00:29:39.956>already <00:29:39.959>post-quantum 00:29:39.960 --> 00:29:43.350 align:start position:0% <00:29:39.960>considering <00:29:40.193>maybe <00:29:40.426>already <00:29:40.660>post-quantum <00:29:40.893>cryptographic <00:29:41.126>signature <00:29:41.360>algorithm. 00:29:43.350 --> 00:29:43.360 align:start position:0% <00:29:43.350>cryptographic <00:29:43.354>signature <00:29:43.359>algorithm. 00:29:43.360 --> 00:29:44.750 align:start position:0% <00:29:43.360>cryptographic <00:29:43.485>signature <00:29:43.610>algorithm. <00:29:43.735>It <00:29:43.860>will <00:29:43.985>also <00:29:44.110>make <00:29:44.235>sense <00:29:44.360>to <00:29:44.485>create <00:29:44.610>this 00:29:44.750 --> 00:29:44.760 align:start position:0% <00:29:44.750>It <00:29:44.751>will <00:29:44.752>also <00:29:44.753>make <00:29:44.755>sense <00:29:44.756>to <00:29:44.757>create <00:29:44.759>this 00:29:44.760 --> 00:29:48.190 align:start position:0% <00:29:44.760>It <00:29:44.847>will <00:29:44.935>also <00:29:45.022>make <00:29:45.110>sense <00:29:45.197>to <00:29:45.285>create <00:29:45.372>this <00:29:45.460>kind <00:29:45.547>of <00:29:45.635>white <00:29:45.722>list <00:29:45.810>as <00:29:45.897>you <00:29:45.985>can <00:29:46.072>see <00:29:46.160>here. 00:29:48.190 --> 00:29:48.200 align:start position:0% <00:29:48.190>kind <00:29:48.191>of <00:29:48.192>white <00:29:48.193>list <00:29:48.194>as <00:29:48.195>you <00:29:48.196>can <00:29:48.197>see <00:29:48.199>here. 00:29:48.200 --> 00:29:50.150 align:start position:0% <00:29:48.200>kind <00:29:48.293>of <00:29:48.386>white <00:29:48.480>list <00:29:48.573>as <00:29:48.666>you <00:29:48.760>can <00:29:48.853>see <00:29:48.946>here. <00:29:49.040>For <00:29:49.133>instance, <00:29:49.226>we <00:29:49.320>have <00:29:49.413>already <00:29:49.506>this <00:29:49.600>kind 00:29:50.150 --> 00:29:50.160 align:start position:0% <00:29:50.150>For <00:29:50.151>instance, <00:29:50.153>we <00:29:50.154>have <00:29:50.156>already <00:29:50.157>this <00:29:50.159>kind 00:29:50.160 --> 00:29:52.430 align:start position:0% <00:29:50.160>For <00:29:50.300>instance, <00:29:50.440>we <00:29:50.580>have <00:29:50.720>already <00:29:50.860>this <00:29:51.000>kind <00:29:51.140>of <00:29:51.280>possibility <00:29:51.420>to <00:29:51.560>choose 00:29:52.430 --> 00:29:52.440 align:start position:0% <00:29:52.430>of <00:29:52.433>possibility <00:29:52.436>to <00:29:52.439>choose 00:29:52.440 --> 00:29:55.790 align:start position:0% <00:29:52.440>of <00:29:52.567>possibility <00:29:52.694>to <00:29:52.821>choose <00:29:52.949>what <00:29:53.076>is <00:29:53.203>allowed <00:29:53.330>to <00:29:53.458>use <00:29:53.585>as <00:29:53.712>algorithm <00:29:53.840>for 00:29:55.790 --> 00:29:55.800 align:start position:0% <00:29:55.790>what <00:29:55.791>is <00:29:55.792>allowed <00:29:55.793>to <00:29:55.795>use <00:29:55.796>as <00:29:55.797>algorithm <00:29:55.799>for 00:29:55.800 --> 00:29:58.550 align:start position:0% <00:29:55.800>what <00:29:55.907>is <00:29:56.015>allowed <00:29:56.123>to <00:29:56.230>use <00:29:56.338>as <00:29:56.446>algorithm <00:29:56.553>for <00:29:56.661>creating <00:29:56.769>the <00:29:56.876>signature. <00:29:56.984>So, <00:29:57.092>also <00:29:57.200>use 00:29:58.550 --> 00:29:58.560 align:start position:0% <00:29:58.550>creating <00:29:58.551>the <00:29:58.553>signature. <00:29:58.555>So, <00:29:58.557>also <00:29:58.559>use 00:29:58.560 --> 00:30:01.430 align:start position:0% <00:29:58.560>creating <00:29:58.676>the <00:29:58.793>signature. <00:29:58.909>So, <00:29:59.026>also <00:29:59.143>use <00:29:59.260>this <00:29:59.376>of <00:29:59.493>course <00:29:59.610>properly. <00:29:59.726>And <00:29:59.843>last <00:29:59.960>but 00:30:01.430 --> 00:30:01.440 align:start position:0% <00:30:01.430>this <00:30:01.431>of <00:30:01.433>course <00:30:01.434>properly. <00:30:01.436>And <00:30:01.437>last <00:30:01.439>but 00:30:01.440 --> 00:30:03.910 align:start position:0% <00:30:01.440>this <00:30:01.547>of <00:30:01.655>course <00:30:01.763>properly. <00:30:01.870>And <00:30:01.978>last <00:30:02.086>but <00:30:02.193>not <00:30:02.301>least, <00:30:02.409>don't <00:30:02.516>implement <00:30:02.624>this <00:30:02.732>on <00:30:02.840>your 00:30:03.910 --> 00:30:03.920 align:start position:0% <00:30:03.910>not <00:30:03.911>least, <00:30:03.913>don't <00:30:03.914>implement <00:30:03.916>this <00:30:03.917>on <00:30:03.919>your 00:30:03.920 --> 00:30:06.470 align:start position:0% <00:30:03.920>not <00:30:04.047>least, <00:30:04.174>don't <00:30:04.301>implement <00:30:04.429>this <00:30:04.556>on <00:30:04.683>your <00:30:04.810>own. <00:30:04.938>I <00:30:05.065>get <00:30:05.192>often <00:30:05.320>told 00:30:06.470 --> 00:30:06.480 align:start position:0% <00:30:06.470>own. <00:30:06.472>I <00:30:06.474>get <00:30:06.476>often <00:30:06.479>told 00:30:06.480 --> 00:30:08.870 align:start position:0% <00:30:06.480>own. <00:30:06.620>I <00:30:06.760>get <00:30:06.900>often <00:30:07.040>told <00:30:07.180>basically, <00:30:07.320>"Ah, <00:30:07.460>FIDO2 <00:30:07.600>is <00:30:07.740>it's <00:30:07.880>a 00:30:08.870 --> 00:30:08.880 align:start position:0% <00:30:08.870>basically, <00:30:08.871>"Ah, <00:30:08.873>FIDO2 <00:30:08.875>is <00:30:08.877>it's <00:30:08.879>a 00:30:08.880 --> 00:30:10.910 align:start position:0% <00:30:08.880>basically, <00:30:09.020>"Ah, <00:30:09.160>FIDO2 <00:30:09.300>is <00:30:09.440>it's <00:30:09.580>a <00:30:09.720>specification <00:30:09.860>is <00:30:10.000>so <00:30:10.140>complicated <00:30:10.280>and 00:30:10.910 --> 00:30:10.920 align:start position:0% <00:30:10.910>specification <00:30:10.912>is <00:30:10.914>so <00:30:10.916>complicated <00:30:10.919>and 00:30:10.920 --> 00:30:12.110 align:start position:0% <00:30:10.920>specification <00:30:11.134>is <00:30:11.348>so <00:30:11.562>complicated <00:30:11.776>and <00:30:11.991>whatnot." 00:30:12.110 --> 00:30:12.120 align:start position:0% whatnot." 00:30:12.120 --> 00:30:15.030 align:start position:0% <00:30:12.120>whatnot." <00:30:12.320>I <00:30:12.520>don't <00:30:12.719>know <00:30:12.919>if <00:30:13.120>you <00:30:13.320>ever <00:30:13.520>have 00:30:15.030 --> 00:30:15.040 align:start position:0% <00:30:15.030>I <00:30:15.031>don't <00:30:15.033>know <00:30:15.034>if <00:30:15.036>you <00:30:15.037>ever <00:30:15.039>have 00:30:15.040 --> 00:30:16.950 align:start position:0% <00:30:15.040>I <00:30:15.167>don't <00:30:15.294>know <00:30:15.421>if <00:30:15.549>you <00:30:15.676>ever <00:30:15.803>have <00:30:15.930>read <00:30:16.058>through <00:30:16.185>all <00:30:16.312>the <00:30:16.440>OAuth 00:30:16.950 --> 00:30:16.960 align:start position:0% <00:30:16.950>read <00:30:16.952>through <00:30:16.954>all <00:30:16.956>the <00:30:16.959>OAuth 00:30:16.960 --> 00:30:19.830 align:start position:0% <00:30:16.960>read <00:30:17.135>through <00:30:17.310>all <00:30:17.485>the <00:30:17.660>OAuth <00:30:17.835>specifications <00:30:18.010>or <00:30:18.185>FIDO2 <00:30:18.360>specifications. 00:30:19.830 --> 00:30:19.840 align:start position:0% <00:30:19.830>specifications <00:30:19.832>or <00:30:19.836>FIDO2 <00:30:19.839>specifications. 00:30:19.840 --> 00:30:21.550 align:start position:0% <00:30:19.840>specifications <00:30:19.995>or <00:30:20.151>FIDO2 <00:30:20.306>specifications. <00:30:20.462>No <00:30:20.617>one <00:30:20.773>would <00:30:20.928>ever <00:30:21.084>think <00:30:21.240>about 00:30:21.550 --> 00:30:21.560 align:start position:0% <00:30:21.550>No <00:30:21.551>one <00:30:21.553>would <00:30:21.555>ever <00:30:21.557>think <00:30:21.559>about 00:30:21.560 --> 00:30:23.350 align:start position:0% <00:30:21.560>No <00:30:21.687>one <00:30:21.814>would <00:30:21.941>ever <00:30:22.069>think <00:30:22.196>about <00:30:22.323>implementing <00:30:22.450>OAuth <00:30:22.578>on <00:30:22.705>your <00:30:22.832>own. <00:30:22.960>Why 00:30:23.350 --> 00:30:23.360 align:start position:0% <00:30:23.350>implementing <00:30:23.351>OAuth <00:30:23.353>on <00:30:23.355>your <00:30:23.357>own. <00:30:23.359>Why 00:30:23.360 --> 00:30:26.270 align:start position:0% <00:30:23.360>implementing <00:30:23.467>OAuth <00:30:23.575>on <00:30:23.683>your <00:30:23.790>own. <00:30:23.898>Why <00:30:24.006>should <00:30:24.113>you? <00:30:24.221>And <00:30:24.329>it's <00:30:24.436>the <00:30:24.544>same <00:30:24.652>over <00:30:24.760>here. 00:30:26.270 --> 00:30:26.280 align:start position:0% <00:30:26.270>should <00:30:26.271>you? <00:30:26.272>And <00:30:26.273>it's <00:30:26.275>the <00:30:26.276>same <00:30:26.277>over <00:30:26.279>here. 00:30:26.280 --> 00:30:29.670 align:start position:0% <00:30:26.280>should <00:30:26.379>you? <00:30:26.480>And <00:30:26.580>it's <00:30:26.680>the <00:30:26.780>same <00:30:26.879>over <00:30:26.980>here. <00:30:27.080>Use <00:30:27.180>Keycloak. <00:30:27.280>Use <00:30:27.379>maybe <00:30:27.480>also <00:30:27.580>an <00:30:27.680>identity 00:30:29.670 --> 00:30:29.680 align:start position:0% <00:30:29.670>Use <00:30:29.671>Keycloak. <00:30:29.673>Use <00:30:29.674>maybe <00:30:29.676>also <00:30:29.677>an <00:30:29.679>identity 00:30:29.680 --> 00:30:31.510 align:start position:0% <00:30:29.680>Use <00:30:29.787>Keycloak. <00:30:29.895>Use <00:30:30.003>maybe <00:30:30.110>also <00:30:30.218>an <00:30:30.326>identity <00:30:30.433>as <00:30:30.541>a <00:30:30.649>service <00:30:30.756>solution <00:30:30.864>like <00:30:30.972>Auth0 <00:30:31.080>or 00:30:31.510 --> 00:30:31.520 align:start position:0% <00:30:31.510>as <00:30:31.511>a <00:30:31.513>service <00:30:31.514>solution <00:30:31.516>like <00:30:31.517>Auth0 <00:30:31.519>or 00:30:31.520 --> 00:30:33.990 align:start position:0% <00:30:31.520>as <00:30:31.636>a <00:30:31.753>service <00:30:31.870>solution <00:30:31.986>like <00:30:32.103>Auth0 <00:30:32.220>or <00:30:32.336>Entra <00:30:32.453>ID <00:30:32.570>or <00:30:32.686>whatnot. <00:30:32.803>Don't <00:30:32.920>implement 00:30:33.990 --> 00:30:34.000 align:start position:0% <00:30:33.990>Entra <00:30:33.991>ID <00:30:33.993>or <00:30:33.995>whatnot. <00:30:33.997>Don't <00:30:33.999>implement 00:30:34.000 --> 00:30:36.230 align:start position:0% <00:30:34.000>Entra <00:30:34.107>ID <00:30:34.215>or <00:30:34.323>whatnot. <00:30:34.430>Don't <00:30:34.538>implement <00:30:34.646>Don't <00:30:34.753>ever <00:30:34.861>think <00:30:34.969>you <00:30:35.076>can <00:30:35.184>be <00:30:35.292>better <00:30:35.400>than 00:30:36.230 --> 00:30:36.240 align:start position:0% <00:30:36.230>Don't <00:30:36.231>ever <00:30:36.232>think <00:30:36.233>you <00:30:36.235>can <00:30:36.236>be <00:30:36.237>better <00:30:36.239>than 00:30:36.240 --> 00:30:38.190 align:start position:0% <00:30:36.240>Don't <00:30:36.340>ever <00:30:36.440>think <00:30:36.540>you <00:30:36.640>can <00:30:36.740>be <00:30:36.840>better <00:30:36.940>than <00:30:37.040>persons <00:30:37.140>who <00:30:37.240>are <00:30:37.340>doing <00:30:37.440>this <00:30:37.540>in <00:30:37.640>full-time. 00:30:38.190 --> 00:30:38.200 align:start position:0% <00:30:38.190>persons <00:30:38.191>who <00:30:38.193>are <00:30:38.194>doing <00:30:38.196>this <00:30:38.197>in <00:30:38.199>full-time. 00:30:38.200 --> 00:30:40.190 align:start position:0% <00:30:38.200>persons <00:30:38.340>who <00:30:38.480>are <00:30:38.620>doing <00:30:38.760>this <00:30:38.900>in <00:30:39.040>full-time. <00:30:39.180>It <00:30:39.320>might <00:30:39.460>sound <00:30:39.600>harsh, 00:30:40.190 --> 00:30:40.200 align:start position:0% <00:30:40.190>It <00:30:40.193>might <00:30:40.196>sound <00:30:40.199>harsh, 00:30:40.200 --> 00:30:43.030 align:start position:0% <00:30:40.200>It <00:30:40.327>might <00:30:40.454>sound <00:30:40.581>harsh, <00:30:40.709>but <00:30:40.836>do <00:30:40.963>never <00:30:41.090>implement <00:30:41.218>this <00:30:41.345>on <00:30:41.472>your <00:30:41.600>own. 00:30:43.030 --> 00:30:43.040 align:start position:0% <00:30:43.030>but <00:30:43.031>do <00:30:43.032>never <00:30:43.033>implement <00:30:43.035>this <00:30:43.036>on <00:30:43.037>your <00:30:43.039>own. 00:30:43.040 --> 00:30:45.070 align:start position:0% <00:30:43.040>but <00:30:43.133>do <00:30:43.226>never <00:30:43.320>implement <00:30:43.413>this <00:30:43.506>on <00:30:43.600>your <00:30:43.693>own. <00:30:43.786>You <00:30:43.879>There <00:30:43.973>are <00:30:44.066>so <00:30:44.159>many <00:30:44.253>things <00:30:44.346>you <00:30:44.440>don't 00:30:45.070 --> 00:30:45.080 align:start position:0% <00:30:45.070>You <00:30:45.071>There <00:30:45.072>are <00:30:45.073>so <00:30:45.075>many <00:30:45.076>things <00:30:45.077>you <00:30:45.079>don't 00:30:45.080 --> 00:30:47.550 align:start position:0% <00:30:45.080>You <00:30:45.173>There <00:30:45.266>are <00:30:45.360>so <00:30:45.453>many <00:30:45.546>things <00:30:45.639>you <00:30:45.733>don't <00:30:45.826>know <00:30:45.919>and <00:30:46.013>so <00:30:46.106>many <00:30:46.199>things <00:30:46.293>you <00:30:46.386>don't <00:30:46.480>know 00:30:47.550 --> 00:30:47.560 align:start position:0% <00:30:47.550>know <00:30:47.551>and <00:30:47.552>so <00:30:47.553>many <00:30:47.555>things <00:30:47.556>you <00:30:47.557>don't <00:30:47.559>know 00:30:47.560 --> 00:30:50.110 align:start position:0% <00:30:47.560>know <00:30:47.653>and <00:30:47.746>so <00:30:47.840>many <00:30:47.933>things <00:30:48.026>you <00:30:48.120>don't <00:30:48.213>know <00:30:48.306>you <00:30:48.399>don't <00:30:48.493>know <00:30:48.586>yet. <00:30:48.679>So, <00:30:48.773>please <00:30:48.866>take <00:30:48.960>this 00:30:50.110 --> 00:30:50.120 align:start position:0% <00:30:50.110>you <00:30:50.111>don't <00:30:50.112>know <00:30:50.113>yet. <00:30:50.115>So, <00:30:50.116>please <00:30:50.117>take <00:30:50.119>this 00:30:50.120 --> 00:30:53.430 align:start position:0% <00:30:50.120>you <00:30:50.219>don't <00:30:50.320>know <00:30:50.419>yet. <00:30:50.520>So, <00:30:50.620>please <00:30:50.719>take <00:30:50.820>this <00:30:50.919>advice <00:30:51.020>and <00:30:51.120>just <00:30:51.219>use <00:30:51.320>maybe <00:30:51.419>Keycloak <00:30:51.520>if 00:30:53.430 --> 00:30:53.440 align:start position:0% <00:30:53.430>advice <00:30:53.431>and <00:30:53.433>just <00:30:53.434>use <00:30:53.436>maybe <00:30:53.437>Keycloak <00:30:53.439>if 00:30:53.440 --> 00:30:55.190 align:start position:0% <00:30:53.440>advice <00:30:53.615>and <00:30:53.790>just <00:30:53.965>use <00:30:54.140>maybe <00:30:54.315>Keycloak <00:30:54.490>if <00:30:54.665>you <00:30:54.840>want. 00:30:55.190 --> 00:30:55.200 align:start position:0% <00:30:55.190>you <00:30:55.199>want. 00:30:55.200 --> 00:30:57.310 align:start position:0% <00:30:55.200>you <00:30:55.375>want. <00:30:55.550>Having <00:30:55.725>then <00:30:55.900>said, <00:30:56.075>my <00:30:56.250>time <00:30:56.425>is <00:30:56.600>already 00:30:57.310 --> 00:30:57.320 align:start position:0% <00:30:57.310>Having <00:30:57.311>then <00:30:57.312>said, <00:30:57.314>my <00:30:57.316>time <00:30:57.317>is <00:30:57.319>already 00:30:57.320 --> 00:31:00.230 align:start position:0% <00:30:57.320>Having <00:30:57.419>then <00:30:57.520>said, <00:30:57.620>my <00:30:57.720>time <00:30:57.820>is <00:30:57.919>already <00:30:58.020>also <00:30:58.120>running <00:30:58.220>out. <00:30:58.320>So, <00:30:58.419>thank <00:30:58.520>you <00:30:58.620>so <00:30:58.720>much 00:31:00.230 --> 00:31:00.240 align:start position:0% <00:31:00.230>also <00:31:00.231>running <00:31:00.232>out. <00:31:00.233>So, <00:31:00.235>thank <00:31:00.236>you <00:31:00.237>so <00:31:00.239>much 00:31:00.240 --> 00:31:02.150 align:start position:0% <00:31:00.240>also <00:31:00.333>running <00:31:00.426>out. <00:31:00.520>So, <00:31:00.613>thank <00:31:00.706>you <00:31:00.800>so <00:31:00.893>much <00:31:00.986>for <00:31:01.080>staying <00:31:01.173>with <00:31:01.266>you <00:31:01.360>so <00:31:01.453>late. <00:31:01.546>I'm <00:31:01.640>so 00:31:02.150 --> 00:31:02.160 align:start position:0% <00:31:02.150>for <00:31:02.151>staying <00:31:02.152>with <00:31:02.153>you <00:31:02.155>so <00:31:02.156>late. <00:31:02.157>I'm <00:31:02.159>so 00:31:02.160 --> 00:31:03.830 align:start position:0% <00:31:02.160>for <00:31:02.253>staying <00:31:02.346>with <00:31:02.440>you <00:31:02.533>so <00:31:02.626>late. <00:31:02.720>I'm <00:31:02.813>so <00:31:02.906>happy <00:31:03.000>and <00:31:03.093>it's <00:31:03.186>a <00:31:03.280>great <00:31:03.373>honor <00:31:03.466>that <00:31:03.560>you 00:31:03.830 --> 00:31:03.840 align:start position:0% <00:31:03.830>happy <00:31:03.831>and <00:31:03.832>it's <00:31:03.833>a <00:31:03.835>great <00:31:03.836>honor <00:31:03.837>that <00:31:03.839>you 00:31:03.840 --> 00:31:06.110 align:start position:0% <00:31:03.840>happy <00:31:03.956>and <00:31:04.073>it's <00:31:04.189>a <00:31:04.306>great <00:31:04.423>honor <00:31:04.540>that <00:31:04.656>you <00:31:04.773>all <00:31:04.889>joined <00:31:05.006>me <00:31:05.123>so <00:31:05.240>late. 00:31:06.110 --> 00:31:06.120 align:start position:0% <00:31:06.110>all <00:31:06.112>joined <00:31:06.114>me <00:31:06.116>so <00:31:06.119>late. 00:31:06.120 --> 00:31:09.270 align:start position:0% <00:31:06.120>all <00:31:06.236>joined <00:31:06.353>me <00:31:06.469>so <00:31:06.586>late. <00:31:06.703>Hope <00:31:06.820>you <00:31:06.936>liked <00:31:07.053>it <00:31:07.169>and <00:31:07.286>have <00:31:07.403>a <00:31:07.520>great 00:31:09.270 --> 00:31:09.280 align:start position:0% <00:31:09.270>Hope <00:31:09.271>you <00:31:09.272>liked <00:31:09.273>it <00:31:09.275>and <00:31:09.276>have <00:31:09.277>a <00:31:09.279>great 00:31:09.280 --> 00:31:11.346 align:start position:0% <00:31:09.280>Hope <00:31:09.420>you <00:31:09.560>liked <00:31:09.700>it <00:31:09.840>and <00:31:09.980>have <00:31:10.120>a <00:31:10.260>great <00:31:10.399>evening. <00:31:10.540>Thank <00:31:10.680>you. 00:31:11.346 --> 00:31:11.356 align:start position:0% <00:31:11.346>evening. <00:31:11.350>Thank <00:31:11.355>you. 00:31:11.356 --> 00:31:13.376 align:start position:0% <00:31:11.356>evening. <00:31:11.706>Thank <00:31:12.056>you. <00:31:12.406>>> <00:31:12.756>[applause]