https://pessolato.github.io/tags/mfa/Recent content in MFA on Push to MasteryHugoen<a href='https://creativecommons.org/licenses/by-nc/4.0/' target='_blank' rel='noopener'>CC BY-NC 4.0</a>Tue, 22 Jul 2025 20:57:48 +0200https://pessolato.github.io/posts/mfa-misconceptions/Tue, 22 Jul 2025 20:57:48 +0200https://pessolato.github.io/posts/mfa-misconceptions/<p>When discussing the security of information systems, one of the foundational concepts is <strong>authentication</strong>, which can be defined as the process of verifying the identity of a user, device, or system attempting to access a resource. Authentication answers the question: <em>“Who are you?”</em>, and it does so by requiring evidence of identity.</p> <p>This verification is necessary because, much like in physical security, access to protected spaces or resources must be controlled based on evidence of identity. In the physical world, guards at a secure facility do not simply allow anyone to enter; they check badges, keys, or biometric features, and may even recognize familiar individuals. The possession of a key or ID, knowledge of a code, or inherent physical traits serve as tangible proofs of identity. Similarly, in digital systems, where there is no direct way for the system to “see” or “sense” the claimant, we rely on analogous mechanisms: transmitted credentials and controlled challenges that emulate the same principles of trust established at a physical checkpoint.</p>