FIDO Alliance

Which takes us sort of to the next event, Authenticate.

Because it's organized by the FIDO Alliance, yes, there will be a lot of conversation about pass keys.

a lot of conversation about passkeys, but it's grown beyond being simply the passkey conference.

The program increasingly touches authentication, identity verification, account recovery, authorization, fraud payments, the problems that emerge once phishing-resistant authentication becomes more widely deployed.

You can actually have it, you can verify it.

Um, and, and so this, as I was saying, is something that we have been working with Google but also at, at the FIDO Alliance within EMVCo with others to develop to, to use as a basis to develop the standards that we need to scale agentic comms.

Uh, so you're -- you have been working with Google.

Is this Verifiable Intent already been embedded into AgentPay or you are still in the process of doing that?

SSHD, make the authorized keys restrict keyword apply correctly to the tunnel forwarding to.

New features, SSH keygen, the ability to set or clear the touch required and verified flags on FIDO private keys when setting a private keys passphrase.

tweak ordering of certificates tried during pub key authentication to prefer FIDO keys that do not require presence touch first and FIDO keys that require user verification via pin or biometric last.

Add the SSH-Z user at host mode that prints the keys that will be tried for public key authentication in the order they will be used.

Cool.

Yeah, well, it's good.

It's a timely question because one of the things that we as an industry have adopted through FIDO is actually pass keys.

So it's actually the chain of biometrics to cryptographic capabilities that are completely obfuscated from the user that allow you to really create a much more seamless and secure way to actually enable authentication.

Now, what that means is a couple of things.

Amazingly, sixty years later, the password is still the predominant method used to identify people on the internet despite the obvious limitations to the technology and the continuous list of examples from the very beginning of bad guys exploiting the architecture.

In recent years, there has been a growing movement to replace passwords with something more secure, spearheaded by the FIDO Alliance.

FIDO stands for Fast Identity Online and is a nonprofit that consists of over two hundred and fifty vendors who have a vested interest in getting this right, like Google, Microsoft, Apple, and many others.

In twenty twenty-one, the alliance published the FIDO2 standard, which defines a set of protocols for passwordless authentication.