How exactly security key work and how their improvement over an OTP solution?

  1. Registration:- Since security key must be registered with a site or service. at registration time, the security key is generates a public - private key pair unique to that site, and submits the public key to the site for registration. It also binds the identity of the site with the key pair

  2. Once registered with site you are prompted to authenticate (username and password) but afterward you will be prompted to tap the security key.

Certificates

certificates are public keys that are signed by CA

Client certificates, certificate based authentication

LDAP -> lightweight directory access protocol an open industry standard protocol for accessing and maintaining directory services

organizational unit

distinguished name

starts TLS search

add/delete/modify

unbind

Last updated