BE SURE TO -- SPECIFIC LATERALLY
OFF N A NEW STANDARD . >> YES SO
OF IDENTITY STANDARDS WHICH MEANS
FACING PARTS OF IDENTITY AND ACCESS
WHO WANT TO TRY TO AUTHENTICATE
STUCK WITH A PROBLEM . THEY REALLY
OF HARDWARE A USER MIGHT HAVE .
THEY HAVE TO USE THINGS LIKE SECURITY
COMMON DENOMINATOR FOR EVERYONE
IT . >> YES , AND THAT'S TERRIBLE
FORWARD AS A SOCIETY . SO WHAT'S
CALLED WEB AUTHENTICATION AND WEB
BODY CALLED THE W3 C AND IT HAS
FIDO . SO YOU MIGHT BE FAMILIAR
IDENTITY ONLINE . AND THE IDEA BEHIND
TO MAKE EVERYONE 'S HARDWARE TO
I'M GOING TO SHOW YOU A COUPLE THINGS
INTO SOMETHING LIKE UR CELL PHONE
READERS ON THE BACK AND IT'S VERY
, GO ON WITH YOUR LIFE . >> ABSOLUTELY
GOOD FOR THIS DEVICE . OR HAS ONLY
NOW . WHAT WE HAVE DONE IN THE INDUSTRY
, LENOVO , YOU NAME A HARDWARE MANUFACTURER
, WHAT WE HAVE DONE IS CREATED A
TAKE A LOCAL MECHANISM FOR AUTHENTICATION
KEY OUT OF IT . THAT CAN BE SENT
DUNN . WHICH SOUNDS REALLY HARD
US SEVEN YEARS TO DO IT . >> OH
MEANS IS THAT WE CAN NOW USE BUILT
LAPTOP , OR YOUR FIT BIT OR VARIOUS
USE THE AUTHENTICATION MECHANISMS
. OR YOU CAN USE THIS , SO WHAT
SECURITY KEY . ALSO KNOWN AS AN
THING THAT'S COMMON FOR ALL THESE
A SECURE ELEMENT IN THEM . SO IF
A TPM INSIDE OF IT , YOU HAVE A
UNLOCK . WELL , THIS THING ALSO
SHOW YOU ONE MORE . SO THIS ONE
AND IT HAS A FINGERPRINT NIT JUST
GRABBED YOUR CELL PHONE RIPPED THE
IT PORT PORTABLE . SO THIS IS CALLED
TOR AND THE IDEA BEHIND THIS IS
GOING TO UNLOCK A PRIVATE KEY THAT'S
DANCE WITH THE WEBSITE , AND THE
IS WHEN YOU AS A USER DO SOMETHING
WE CALL A GESTURE IN ORDER TO UNLOCK
TO USE YOUR PRIVATE CYTOSIGN A DOCUMENT
OF EXAMPLES OF WHAT A GESTURE WOULD
WITH THEM . >> YES , THERE ARE TWO
TODAY . AND REMEMBER FOR THESE KEY
THERE'S -- IF IT'S A FINGERPRINT
, YOU KNOW , I CAN PERFORM A GESTURE
IS SIMPLY TOUCHING MY AUTHENTICATE
ONE , THIS ONE YOU CAN HAVE A TEST
OKAY . >> THE DIFFERENCE BETWEEN
LETS YOU KNOW IT'S THE SAME PERSON
IS . IT ONLY KNOWS THAT IT'S THE
THIS ONE JUST LETS YOU KNOW THERE'S
TO A SCRIPT . >> RIGHT . SO IT'S
SHOULDN'T BE MAN IN THE MIDDLE BECAUSE
AROUND HOW IT ALL WORKS , AND WE
AND THE OPERATING SYSTEMS TO TAKE
. S IT'S LIKE A DANCE , RIGHT ?
YOU CAN TRY THIS TODAY . AND THE
ONLY TRY IT ON MICROSOFT . EQUIPMENT
WE'RE STILL GETTING TO THE POINT
BOTH VERSIONS OF EDGE . IT WORKS
THE WINDOWS INSIDER VERSION . OF
YOU'LL SEE WHEN YOU GET INTO THAT
A NUMBER OF TEST SITES , YOU CAN
AND THEN YOU CAN USE EITHER THIS
LAPTOP AND JUST SEE IF IT WORKS
DEVELOPER . >> YES . >> WOULD I
AWNINGS AUTHENTICATION >> I DON'T
YOU DO , BUT MY RECOMMENDATION WOULD
. SO I DON'T RECOMMEND SINGLE FACTOR
ANY TIME . WHAT WE ARE WORKING ON
WORKING ON A CASE WHERE THIS BECOMES
IT'S YOUR FIRST FACTOR . >> OH ,
STILL HAVE TO HAVE SOME MECHANISM
THIS BECOMES A GREAT COMPLEMENT
YOUR ORGANIZATION MIGHT CHOOSE ,
WHATEVER YOU WANT . YOU DO HAVE
LEVEL OF SECURITY . BUT THE MORE
, ABSOLUTELY . >> YES . >> SO LET'S
BE IN MY LAPTOP AND THEN INSTEAD
ABLE TO JUST CLICK THE BUTTON OR
BE LIKE OH THAT'S TANYA . >> ABSOLUTELY
PART OF THE SPECIFICATION THAT ALLOWS TO YOU SHARE A SYMMETRIC SECRET WITH YOUR DEVICE, THE DEVICE ITSELF, AND
ON THE AIRPLANE . >> COOL . >> SO
SWORD ? >> AHA . WELL , THE SECRET
ONTS DEVICE , AND THEY NEVER LEAVE
GESTURE . IN THE CASE OF UNLOCKING
CASE . BECAUSE YOU HAVE TO BE ABLE
THE USER EVER INTERACTS , AND SO
WE'VE NEGOTIATED . >> OKAY . THIS
DEVELOPER . >> YES . >> WHAT TYPES
THIS ? >> THAT IS AN EXCELLENT QUESTION
RUNNING -- IF YOU'VE GOT A WEBSITE
IS A PERFECT THING TO USE , BECAUSE
TYPE OF TECHNOLOGY . SO YOU CAN
AND YOU CAN ASK FOR A WEB AUTHEN
PAGE . AND WHAT COMES BACK IS A
USE . THE GREAT THING ABOUT IT IS
IS A JAVASCRIPT API THAT YOU CAN
TWO JAVASCRIPT COMMANDS . SO IF
CALLED NAVIGATE NAVIGATOR . CREDENTIALS
AND THERE ARE TWO METHODS , GET
A CREDENTIAL YOU ARE LITERALLY GENERATE
INSIDE OF THIS SECURE ELEMENT .
SIGNED INFORMATION THAT IS PRIVACY
OTHER THAN YOUR ACCOUNT NAME . UP
THAT YOU NOW HAVE THIS PRIVATE KEY
ENTIRE LIFETIME OF YOUR WEBSITE
, YOU DON'T HAVE TO CARE IF IT'S
OR IF IT'S ONE OF THESE SECURITY
FINGERPRINT READER ON YOUR LAPTOP
INFORMATION EVERY TIME , WHICH IS
TO AUTHENTICATE SOMEBODY WITH THAT
DOT CREDENTIALS DOT GET . >> THAT
GREAT . >> SO THIS IS GOING TO BE
COMPANIES COULD USE THIS ? THIS
MICROSOFT ? >> THAT IS CORRECT .
IT NOT VERY LONG AGO , SO YES .
IMPLEMENT THE STANDARD . WHAT WE
THE VET BROWSER MAKERS A LOT OF
ALL OF THEM , AND WHAT I EXPECT
WILL COME OUT THAT JUST SUPPORTS
. >> I HOPE ASSOCIATION TOO . AS
ANY OF MY PASSWORDS , AS A SECURITY
I'M SURE YOU KNOW , THERE ARE A
THE FACT THAT I HAVE A PASSWORD
RISK NOW TODAY IN ORGANIZATIONS
PEOPLE USE PASSWORDS IN INSECURE
CAN STEAL THEM FROM AN INSECURE
. ? YES AND ALSO THE FACT THAT PEOPLE
AWNINGS AUTHENTICATION THEY REUSE
DOUBLE CHECK OF THE MULTI FACTOR
MAKE SURE THAT YOU CAN IN FACT ONLY
AND NO PASSWORDS IN OUR ENTIRE PLATFORM
. >> VERY BIG JOB . >> I REALLY
THIS . SO LET'S SAY STILL I'M A
WANT TO START USING THIS , WHERE
START OR LEARN MORE ? >> SO YOU
CAN CALL THE JAVASCRIPT API I WAS
EDGE WEB AUTHEN SO W-E-B-A-U-T-H-N
A WHOLE BURCHL OF SAMPLE SCRIPPS
IT A TRY . >> JUST TO BE CLEAR THIS
NOT Z , ZED , THE LIKE CANADIEN
THIS IS WEB AUTH AUTHEN AS A STANDARD
I THINK AS A SECURITY PEOPLE A LOT
BE PRETTY EXCITED ABOUT THIS . >>
GOOD GOODNESS BAKED INTO THIS .
IS NOBODY IS DREAMING THIS UP AT
YEARS DEBATING ALL OF THE RISKS
RISKS , ALL OF THE FEATURES . AND
SO NOBODY GETS THEIR WAY NECESSARILY
EXAMINED PATTERN . IF THERE ARE
. AND WE HAVE SUGGESTIONS FOR HOW
. >> VERY COOL . EARLIER I SAW YOUR
-- HAD YOU SO MANY MORE THAN THAT
WANT TO BRING IT UP HERE BECAUSE
WITH SO MANY AMAZE AMAZING GADGETS
CAN GET THESE ON AMAZON SO THIS
. THESE ARE NOT EXPENSIVE CUSTOM
INSTALL IF YOU LOOK UP SECURITY
A WHOLE BUNCH OF THESE . AND I HAVE
LITTLE COLLECTION . YOU DON'T ACTUALLY
A GEEK , LIKE I AM , WHO LOVES THIS
AND BLUE ONES CLICK CLICKY ONES
THERE'S PURPLE ONES . I'M A LITTLE
ONES >> IT WILL COME ALONG , THEY'LL
THESE TOO AND MAYBE THEY NEED PINK
CUTENESS . >> YES, I THINK YOU'RE
A MICROSOFT STORE HERE I WONDER
DO . >> I DON'T KNOW IT'S QUITE
CHECK THAT OUT AFTER THIS INTERVIEW
A SECURITY PERSON . AND I WANT TO
THIS PROPERLY . CAN YOU GIVE ME
-- SORRY -- AS A SECURITY PERSON
THIS ? >> ABSOLUTELY . SO THERE'S
COMES WITH CREATING HARDWARE LIKE
THROUGH WHETHER THESE DEVICES OR
INTO YOUR LAPTOPS ARE SUSCEPTIBLE
CHANNEL ATTACK ATTACKS , CRAZY THINGS
PLASTIC . I DON'T EVEN -- I WON'T
THESE THINGS BUT THEY'RE SUPER COOL
A WEB PERSON AND YOU WANT TO UNDERSTAND
YOUR BEST BET IS TO GO TO THE FIDO
. ORG AND YOU'RE GOING TO GET RECOMMENDATIONS
TO TALK TO THE PEOPLE WHO MAKE THE
FOR EXAMPLE , AND WE HAVE A BLOG
STANDARDS BLOG . >> THAT'S AWESOME
IDENTITY STANDARDS BLOG >> I WILL
BE HAPPY TO MAKE SURE MAKE SURE
. >> THAT'S GREAT WATCH IT BECAUSE
MUCH FUN WE CAN DO THIS ALL DAY
FOR BEING ON THE SHOW WITH ME AND
IMPORTANT NEW LESSONS I REALLY APPRECIATE
IT TOO . >> THIS IS THE END OF YOUR
, DON'T WORRY , IT'S NOT TEND OF
RIGHT HERE AT 8: 30 A. M. PACIFIC
THING THAT'S HAPPENING . PLEASE
THREE OF LIVE STREAM AND TWEET AT
SUCH AN AMAZE AMAZING DAY , I HOPE
I DID ON BEHALF OF MICROSOFT AND
FOR WATCHING AND WE'LL SEE YOU TOMORROW