Pomcor

This post is joint work with Sukhi Chuhan and Pema Selden.

Update after the workshop.

A recent survey by the FIDO Alliance shows that passkeys have still not reached widespread adoption.

From the very beginning of the web, browsers have been used as credential wallets to store and present cryptographic credentials, which makes sense since the browser is the user's agent on the web.

December 1, 2024: updated to make corrections as shown.

Two weeks ago I gave a talk about the mobile driver's license standard at IIW XXXVII, the 37th meeting of the Internet Identity Workshop, which took place as usual at the Computer History Museum in Mountain View.

THE STREAMLINED PROCESS IS NO LONGER AVAILABLE.

I have just published a GitHub repository demonstrating a method of two-factor cryptographic authentication with a fusion credential, which provides the same user experience as traditional authentication with username and password, but with strong securit…

Updated August 8 2023 I have just revamped the cryptographic authentication page of the Pomcor site to reflect two major changes that are happening in internet identity and authentication: It is now clear that traditional MFA is vulnerable to MITM phishing

March 18, 2023: The preprint referenced below has been updated to add a patent disclosure.