White paper
The best authentication is no authentication at all
By Thi Nguyen-Huu · PDF, 10 pages
The idea
Why a login can still be stolen in real time
Multi-factor authentication and passkeys protect the login itself. Attacks that relay a real, live login session can still get past them. The white paper looks at where that gap sits and what changes when access is tied to the channel it arrives on.
The paper sets out the relay attack in plain steps, explains why stronger login factors do not close it, and outlines the questions a security leader can ask about online access. The full argument and references are in the PDF.
Questions
Frequently asked questions
What is this white paper about?
It explains why attacks that relay a real login get past multi-factor authentication and passkeys, and what to do about it.
Is it connected to ISF Milan 2026?
Yes. It is the white paper WinMagic presents at the ISF World Congress, 14 to 17 November 2026, in Milan. See the event page.
Is there a PDF version?
Yes. The white paper is a 10-page PDF that can be downloaded from this page.