## 3 Background
### Current Challenges with Conventional Authentication Methods
#### 3.5.3. Adoption of New Security Measures and Technologies  
As with many new technologies in the IT landscape, the adoption of new security technologies or protocols is slow. As new technologies develop, older and less secure options stay in place. This phenomenon can be seen in multiple places around the security field, think from SSL 2.0 to TLS 1.3, where the current numbers from SSL Labs show 1.4% supporting SSL 3.0, 27.9% TLS 1.0, while only 70.1% support the newest version TLS 1.3, even though it has been out since 2018. This also applies to the new form of authentication with passkeys [39, 40, 41]. Therefore, in the following, we briefly look at the adoption process of new technologies.  
Adopting a new technology can generally be defined as company adoption and user adoption. The first major hurdle to overcome when it comes to the adoption is the principle of the chicken and the egg, as companies prefer to wait to implement new technologiesuntil the user base cares to start using the technology. However, users cannot use it unless companies implement it, so the technology ends up in limbo until the companies implement it. This is exactly what happened with FIDO--adoption only gained speed after large corporations like Microsoft and Google joined and set goals for adoption across their platforms. In doing that, they created a market and a user base for the technology, giving other companies a reason to implement it [42; 43].  
This is just one of the many challenges the adoption of new technologies faces. Another example is the integration of the Trusted Platform Module (TPM) 2.0, requiring a physical hardware integration to make it usable for the given user. Adoption was accelerated only after a 'push' from Microsoft and IBM to include and require this new technology. The same problems can be observed with physical FIDO-keys, where the companies need to offer relevant keys and also provide support for authentication using this key while at the same time requiring a willing and large enough user base to utilize it. Furthermore, for successful adoption, a FIDO provider does not just have to convince big corporations to adopt the standard and offer support for the authentication process. It also has to build a user base on which they rely. In the case of FIDO, this user-dependent aspect can be slightly softened with the adaptation of password managers handling the keys [43; 44; 45].  
Another important element is the user experience (UX). When users adapt to new technologies, their known usage patterns are disrupted, giving them less of a drive to try new and potentially less user-friendly but more secure methods. A good example of this is password resets, where users are notorious for creating easily memorizable patterns. These password resets come with the disadvantage of making passwords less secure, and therefore, weaker against cyberattacks. However, it is in its simplest form, user-friendly, making users more willing to use passwords, compared to technologies like passwordless authentication. For these new technologies, they would have to adapt and become used to a new form of authentication. So, the more difficult it becomes to access or log in to a site, the less willing users will be to adapt to this new technology. This will be further covered in the next section [46; 47; 48].