I often snark SMS MFA so it's nice to see a phishing-resistant MFA that brings FIDO options (Yubikey initially) to orgs that have smartcards and want to get away from ADFS into the cloud without distributing certs to phones: tells me more
Conversation
Replying to
while we discussing just how hard it is to secure on-prem infrastructure told me about one data breach where even having an HSM wasn't enough and I think my response was a rather loud YIKES
