One example of how WebAuthn will work is that when a user visits a site they want to log into, they input a user name and then get an alert on their smartphone. Tapping on the alert on their phone then logs them into the website without the need for a password.
举个例子,如果一名用户想用电脑登录访问一家网站,他们可以输入用户名,之后就会在智能手机上收到提示。点击手机上的提示信息就可以顺利登录网站,无需输入密码。
WebAuthn promises to protect users against phishing attacks and the use of stolen credentials as there will be nothing to steal, the authentication token is generated and used once by their specific device each time the user logs in.
“网络认证”标准将使用户无需担心受到网络钓鱼攻击,也不用担心认证信息被盗用,因为本身就没什么可偷的。每次用户登录网站,都会生成特定设备才可使用的一次性身份认证指令。
“After years of increasingly severe data breaches and password credential theft, now is the time for service providers to end their dependency on vulnerable passwords and one-time-passcodes and adopt phishing-resistant FIDO Authentication for all websites and applications,” said Brett McDowell, executive director of the FIDO Alliance, one of the bodies pushing the new standard.
推动新标准实行的机构之一FIDO联盟(线上快速身份认证联盟)的执行董事布雷特-麦克道尔说:“这些年来数据泄露和密码信息被盗的情况越来越严重,现在服务提供商是时候结束他们对易受攻击的密码和一次性密码的依赖,并在所有网站和应用中使用可防止网络钓鱼的线上快速身份认证了。”
【密码再见!互联网联盟推新式在线身份认证】相关文章:
★ 如何克服不安全感
最新
2019-01-07
2019-01-07
2019-01-07
2019-01-07
2019-01-07
2019-01-05