6 min read
IAM Chapter 3: Authentication & MFA
Passwords, OTPs, push approval, number matching, FIDO2. Each MFA method exists because the one before it broke — walked through the attacks that forced each upgrade, ending with why AAL3 requires a hardware key.