Over the top auth strategies (Friends)

The Changelog: Software Development, Open Source

Dan Moore from FusionAuth joins us for a wide-ranging discussion about modern auth strategies. We talk magic links, OTP, MFA, passkeys, password managers & so much more.

Join the discussion

Changelog++ members get a bonus 9 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Retool – The low-code platform for developers to build internal tools — Some of the best teams out there trust Retool…Brex, Coinbase, Plaid, Doordash, LegalGenius, Amazon, Allbirds, Peloton, and so many more – the developers at these teams trust Retool as the platform to build their internal tools. Try it free at retool.com/changelog
• Temporal – Build invincible applications. Manage failures, network outages, flaky endpoints, long-running processes and more, ensuring your workflows never fail. Register for Replay in London, March 3-5 to break free from the status quo.
• Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs.

Featuring:

• Dan Moore – Website, GitHub, LinkedIn, X
• Jerod Santo – GitHub, LinkedIn, Mastodon, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

• Dear new developer (Changelog Interviews #572)
• N-Acetyl Cysteine (NAC): Uses and Risks
• Authentication & User Management Software - FusionAuth
• We Don’t Want Your Password
• Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over
• Passkeys for a passwordless future (Changelog Interviews #544)
• Password Safe
• Microsoft’s new password manager works across Edge, Chrome, and mobile devices
• Building A Self-hostable Product

A few more links from Dan

• Passkeys: they’re not perfect but they’re getting better
• Passkey Adoption Doubles in 2024
• WebAuthn Explained

Something missing or broken? PRs welcome!

บท

1. Let's talk! (00:00:00)

2. Sponsor: Retool (00:00:38)

https://retool.com/changelog

3. N.A.C. & Friends (00:03:23)

4. Dan's auth credentials (00:06:00)

5. I got the magic link (00:08:20)

6. Sand in the gears (00:08:52)

7. Different auth strokes... (00:14:46)

8. Tailscale auth (00:16:06)

9. Ask for more than you need (00:19:38)

10. Reasons to dislike SSO (00:20:12)

11. Just email/password (00:22:39)

12. So many auth providers (00:26:35)

13. FusionAuth is built different (00:28:50)

14. The email comparison (00:29:46)

15. Sponsor: Temporal (00:31:12)

https://temporal.io

16. OTP: better magic links? (00:33:14)

17. Passkeys FTW? (00:36:19)

18. Adam's not sold on Passkeys (00:40:01)

19. 1Password for life (00:42:00)

20. Adam's passkey gripes (00:43:09)

21. Passkeys are faster (00:45:46)

22. No silver bullet (00:47:12)

23. MFA separation of concerns (00:48:04)

24. What good MFA looks like (00:51:53)

25. Password constraints (00:56:19)

26. Sponsor: Notion (00:58:20)

http://notion.com/changelog

27. Adam's luke warm take (01:00:38)

28. Microsoft Authenticator (01:07:54)

29. Jerod's luke warm take (01:11:38)

30. Over The Top! (01:13:19)

31. Sophisticated truck drivers (01:15:36)

32. Survey says! (01:16:14)

33. Where the money is (01:16:48)

34. Dan's auth solution (01:17:31)

35. We're doing it wrong? (01:20:36)

36. Some Google auth love (01:22:05)

37. All the ways (01:23:56)

38. Connecting with Dan (01:24:34)

39. Bye, friends (01:25:36)

40. Coming up next (01:25:45)