Increasingly, whether due to regulatory requirements or a basic recognition that static passwords just don’t provide adequate security, organizations are ...

The Spring Security team says it will release version 1.0 of its long-in-the-works Spring Authorization Server in November of this year. This version of the framework will come with a full feature set ...

Certificate-based authentication is a cryptographic technique that allows one computer to securely identify itself to another across a network connection, using a document called a public-key ...

This paper explains how to use the Java Authentication and Authorization API (JAAS). It plugs JAAS into the Struts framework. Though this paper focuses on Struts, and in particular the example ...

Forbes contributors publish independent expert analyses and insights. I write about contemporary cybersecurity and online privacy issues. Before talking about what authentication is and how it works, ...

A look at the recently released YubiKey 5 hardware authenticator series and how web authentication with the new WebAuthn API leverages devices like the YubiKey for painless website registration and ...