2.5 KiB
Random Readings on Internet Identity
Collected while reading eclectically to refresh cache. Contributions solicited.
WebAuth
Web Authentication: An API for accessing Public Key Credentials Level 1
CTAP, the Client to Authenticator Protocol
The passwordless web explained by Sophos
FIDO2
Fast IDentity Online and FIDO2
OAuth Ecosystem
OpenID Connect is a 'simple' (ha ha) identity layer on top of the OAuth 2.0 protocol Welcome to OpenID Connect And a Wikipedia Page
Eran Hammer's Talk at &Yet damning OAuth and the IETF
Apple Ecosystem
Good explanation of How Apple Find Your Devices Works by Matthew Green
Google Ecosystem
Zanzibar: Google’s Consistent, Global Authorization System
XACML
XACML Wikipedia - eXtensible Access Control Markup Language
SAML
SAML Wikipedia - Security Assertion Markup Language
SAML 2.0 Technical Overview (pdf)
How to Study and Learn SAML - Jeff Hodges
Shibboleth Single Sign-On and Federating Software - Internet 2
Misc
Attributes vs Identity Identity is dead By Steve Wilson
Kim Cameron's Identity Weblog Particularly The Laws Of Identity
Dick Hardt - Identity 2.0 YouTube of O'Reilly
I’ll be passing on Google’s new 2fa for logins on iPhones and iPads. Here’s why -- Dan Goodin
2019.06.12