WebAuthn and FIDO are quickly becoming a strong authentication mechanism of choice for a lot of IdPs and their customers. In general this is a very good development as these technologies have strong support from a wide variety of hardware, operating systems and a growing number of websites. However, it's also important to understand where the weak points are.
In this session we will cover some basics about why you should care about WebAuthn and FIDO on Apple devices, how it's built into the OS through the browsers or via an external Security Key, possible attack vectors, and then some learnings for organizations around deploying these technologies. We'll do some live demos as we go through this showing you the user experience and how potentially malicious code can wedge itself into the transaction.