日前,于巴萨罗那召开的世界移动通信大会上,Google 和线上快速身份验证联盟xuanbudachenghezuo,ji android zhengshiqude fido 2 renzheng,keshixianwumimadenglutiyan,zheiyiweizheweilaijianghuiyou 10 yitai android shebeibuzaixuyaoshurumimajiukedenglu app huozhewangzhan。
fido 2 biaozhundedansheng
duiyu fido lianmeng,xiangbibushaokaifazheyebingbumosheng,qichenglizi 2012 nian 7 yue,zhizaiweijiejueqiangzhirenzhengshebeidejiaohuxingheyonghumianlindaliangfuzadeyonghuminghemimawenti。
FIDO 联盟于去年正式对外发布的 FIDO 2 标准是由 W3C 的 Web 身份验证规范和 FIDO 相应的客户端到身份验证协议zucheng,keshiyonghunenggouliyongchangyongshebeiqingsongdizaiyidonghezhuomianhuanjingzhongduizaixianfuwujinxingshenfenyanzheng。
其中,WebAuthn 定义了一个标准的 Web API,通过将 API 接入浏览器以及相关 Web 平台上,使得在线服务可以调用 FIDO 身份验证。而 CTAP 协议可以让外部设备nenggouyu webauthn peiheshiyong,bingchongdangzhuomianyingyongchengxuhe web fuwudeshenfenyanzhengqi。
jiandanlaishuo,shiyong fido 2 biaozhun,keyizaishebeishangtongguoshiyongzhiwen、shualian、tongkongdengshengwushibiejishuhuodapei usb lingpaijikewanchenggerenshenfenyanzheng,erwuxushiyongrongzhangqiefansuodemima。ciwai,benci google yu fido lianmengdachengdehezuozhonghaibaokuotongguo pin mahedianxiantuyanzheng, rangmeiyouzhiwenshibiemokuaideshebeiyekeyiyanzheng。
muqian,google chrome、weiruan edge、mozilla firefox sandaliulanqidouyizhichile fido 2 renzheng,pingguode safari liulanqiyejiangqizuoweishiyanxinggongnengzhengzaiceshizhong。ciwai,fido lianmengdechengyuanhaibaokuo facebook、github、dropbox、ebay dengzhuliugongsijipingtai。
密码的消亡
erzhisuoyihuiyouzheizhongfangshidechuxian,zhuyaohaishiyinweidangqiandemimadenglufangshiyijingwanquanwufamanzudashujushidaideanquanxingxuqiu。xianshilaikan,qunian 3 yue,facebook yinxielumenshijiandaozhi 5000 wanyonghushujubeiqiequ;6 yue,danmuwangzhanbizu a zhanshouheikegongji,baohanyonghu id、yonghunicheng、jiamicunchudemimadejinqianwantiaoyonghushujuwaixie;12 yue,youwangyoubaoliao,momo 3000 wantiaoshujuzaianwangchushou……zheixiesuishifashengdeshijianyewushiwukebuzaitixingzhewomen,“shishangmeiyoubutoufengdeqiang”,qiegenjuzhongguoxiaofeizhexiehuidefabude《app gerenxinxixieluqingkuangdiaochabaogao》xianshi,zhongguo 85.2% de app yonghucengzaoyushujuxielu。
shishishang,shimianzhongbushaoyingyongchengxujinxingdeshenfenyanzheng,caiqudehaishijiyugongxiangmiyaodefangshi,jifuwuqiduanheyonghugongtongyongyouyigehuoyizumima。zaiyonghujinxingshenfenyanzhengshi,yonghushurumimahefuwuqiduanjinxingpipei,ruoyizhi,zepandingyonghuweihefayonghu。danshubuzhizheizhongfangshi,jiweirongyishoudaoheikegongji,suiranbushaoqiyeyecaiqulejiamisuanfacuoshi,danhaishinanyibimianshujuxielushijiandefasheng。
rujin fido 2 biaozhundeluodi,guidingleyonghudeshujujishengwushibiehuo pin makeyizaibendijinxingshenfenyanzheng,yincibuhuijiangsirenxinxichuanshudaoyonghudengludeyingyonghefuwu,zheiyangwangzhantongguoxiangguanbiaozhundecanshuzaibuzhijiejiechushujudeqiantikeyiwanchengyonghushenfenyanzheng,jidaditigaoleshujudeanquanxing。
写在最后
rujin android 7 jiyishangbanbenjunhuodele fido 2 derenzheng,mimadedenglufangshixianranzhongjianghuibeizhujiantaotai。zaicizhidezhuyideshi,zhiyoudangkaifazhezai web yingyongchengxuhedengluyemianzhongtianjiawumimashenfenyanzheng,bingtongguo android xitongzhong google play service caikeyikuaisuhuodecixingongneng。dangqianguoneiruzhifubao、jingdongzhifudengzhuliuyingyongjunyeyijiarule fido biaozhun,danshixiangyaorangsuoyoudeyingyongjiguoneideliulanqidounengshixianwumimadenglu,kenenghaixuyaodengdaiyidingdeshijian。