October 16, 2024 at 10:24AM
The FIDO Alliance is enhancing passkey usability by creating guidelines for secure credential exchange across platforms, addressing transferability issues. Their draft specifications aim to improve interoperability among providers like Apple and Google, promoting faster, more secure sign-ins and supporting the adoption of passwordless methods, evidenced by Amazon’s implementation.
**Meeting Takeaways – October 16, 2024**
1. **FIDO Alliance Initiative**: The FIDO Alliance is working on improving the exportability of passkeys and other credentials across different providers to enhance interoperability among credential providers.
2. **Credential Provider Special Interest Group (SIG)**: A draft has been published for new specifications focusing on secure credential exchange, endorsed by major companies including 1Password, Apple, Google, Microsoft, and others.
3. **Benefits of Passkeys**:
– Passkeys are designed to reduce phishing risks and credential reuse.
– Sign-in processes using passkeys are reported to be up to 75% faster and 20% more successful compared to traditional password methods.
4. **Challenges with Current Passkeys**: Users currently face limitations in transferring passkeys across different platforms and devices, necessitating the creation of new passkeys.
5. **Proposed Solutions**: The Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF) have been proposed to establish a standard for secure credential transfer between providers, ensuring data is not transferred in the clear.
6. **Amazon’s Adoption**: Over 175 million Amazon customers have enabled passkeys, showcasing the growing trend and commitment towards security and improved user experience in online transactions.
7. **Leadership Statement**: Andrew Shikiar, CEO of FIDO Alliance, highlighted that passkeys represent a significant improvement in online account sign-in processes and praised Amazon’s implementation as a testament to its focus on customer security.
For ongoing updates, consider following FIDO Alliance on Twitter and LinkedIn.