
The Changelog: Software Development, Open Source
Over the top auth strategies (Friends)
Jan 31, 2025 · 1 hr 26 min · 83.5 MB
0:00-1:26:47
Streams straight from the publisher. PodNod never proxies or re-hosts episode audio.
Dan Moore from FusionAuth joins us for a wide-ranging discussion about modern auth strategies. We talk magic links, OTP, MFA, passkeys, password managers & so much more.
Changelog++ members get a bonus 9 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Retool – The low-code platform for developers to build internal tools — Some of the best teams out there trust Retool…Brex, Coinbase, Plaid, Doordash, LegalGenius, Amazon, Allbirds, Peloton, and so many more – the developers at these teams trust Retool as the platform to build their internal tools. Try it free at retool.com/changelog
- Temporal – Build invincible applications. Manage failures, network outages, flaky endpoints, long-running processes and more, ensuring your workflows never fail. Register for Replay in London, March 3-5 to break free from the status quo.
- Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs.
Featuring:
- Dan Moore – Website, GitHub, LinkedIn, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- Dear new developer (Changelog Interviews #572)
- N-Acetyl Cysteine (NAC): Uses and Risks
- Authentication & User Management Software - FusionAuth
- We Don’t Want Your Password
- Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over
- Passkeys for a passwordless future (Changelog Interviews #544)
- Password Safe
- Microsoft’s new password manager works across Edge, Chrome, and mobile devices
- Building A Self-hostable Product
A few more links from Dan
- Passkeys: they’re not perfect but they’re getting better
- Passkey Adoption Doubles in 2024
- WebAuthn Explained
Something missing or broken? PRs welcome!
Join the discussion
changelog.zulipchat.comChangelog++
changelog.comRetool
retool.comTemporal
temporal.ioReplay in London, March 3-5
replay.temporal.ioNotion
notion.comWebsite
ciamweekly.substack.comGitHub
github.comLinkedIn
linkedin.comX
x.comWebsite
jerodsanto.netGitHub
github.comLinkedIn
linkedin.comMastodon
changelog.socialX
x.comWebsite
adamstacoviak.comGitHub
github.comLinkedIn
linkedin.comMastodon
changelog.socialX
x.comDear new developer (Changelog Interviews #572)
changelog.fmWe Don’t Want Your Password
404media.coPassword Safe
pwsafe.orgBuilding A Self-hostable Product
fusionauth.ioPasskey Adoption Doubles in 2024
fidoalliance.orgWebAuthn Explained
fusionauth.ioPRs welcome!
github.com
- 0:00Let's talk!
- 0:38Sponsor: Retool
- 3:23N.A.C. & Friends
- 6:00Dan's auth credentials
- 8:20I got the magic link
- 8:52Sand in the gears
- 14:46Different auth strokes...
- 16:06Tailscale auth
- 19:38Ask for more than you need
- 20:12Reasons to dislike SSO
- 22:39Just email/password
- 26:35So many auth providers
- 28:50FusionAuth is built different
- 29:46The email comparison
- 31:12Sponsor: Temporal
- 33:14OTP: better magic links?
- 36:19Passkeys FTW?
- 40:01Adam's not sold on Passkeys
- 42:001Password for life
- 43:09Adam's passkey gripes
- 45:46Passkeys are faster
- 47:12No silver bullet
- 48:04MFA separation of concerns
- 51:53What good MFA looks like
- 56:19Password constraints
- 58:20Sponsor: Notion
- 1:00:38Adam's luke warm take
- 1:07:54Microsoft Authenticator
- 1:11:38Jerod's luke warm take
- 1:13:19Over The Top!
- 1:15:36Sophisticated truck drivers
- 1:16:14Survey says!
- 1:16:48Where the money is
- 1:17:31Dan's auth solution
- 1:20:36We're doing it wrong?
- 1:22:05Some Google auth love
- 1:23:56All the ways
- 1:24:34Connecting with Dan
- 1:25:36Bye, friends
- 1:25:45Coming up next