SoK: Web Authentication in the Age of End-to-End Encryption

arXiv:2406.18226v1 Announce Type: new
Abstract: The advent of end-to-end encrypted (E2EE) messaging and backup services has brought new challenges for usable authentication. Compared to regular web services, the nature of E2EE implies that the provider cannot recover data for users who have forgotten passwords or lost devices. Therefore, new forms of robustness and recoverability are required, leading to a plethora of solutions ranging from randomly-generated recovery codes to threshold-based social verification. These implications also spread to new forms of authentication …

age arxiv authentication backup challenges cs.cr data devices e2ee encrypted encryption end end-to-end forms lost messaging nature passwords recover regular services the age web web authentication web services