In this talk, we will see several case studies of how authentication can break in practice due to poor implementation and deployment setups. First we will look at implementations of cryptographic protocols, specifically the verification of digital certificates and RSA signatures. We will discuss how implementation oversights in various systems and libraries can render cryptographic mechanisms ineffective in achieving the intended security guarantees. Next we will focus on enterprise Wi-Fi, which is used worldwide by companies and universities.