4 ms·
Yea seems right, U2F keys are very sound security-wise. The biggest challenge I've found is the obvious: ease of use. It can be kinda clunky to need to pull out
by carlosdp 10y ago
Yea seems right, U2F keys are very sound security-wise. The biggest challenge I've found is the obvious: ease of use. It can be kinda clunky to need to pull out a key and plug it in to a USB port in order to log in to Github, for example.
That said, this is mitigated pretty well usually with the "thumbnail USB" style key (like Yubikey has) where you pretty much keep it plugged in all day and click it when you need to access something. Security is still maintained as we're mostly concerned about remote attackers, though still a good idea to pull the key out at the end of the day or if leaving the laptop for a considerable amount of time.
Physical ease of use will definitely be the trick for mass adoption. I recall seeing wireless U2F keys at some point?
- tokenizerrr 10y agoThe yubikey neo support NFC. Comparison here: https://www.yubico.com/products/yubikey-hardware/ https://www.yubico.com/products/yubikey-hardware/ (Edited my comment to correct a mistake)
- Kikawala 10y agoMost yubikeys = only the Neo
- philip1209 10y agoThe only one that supports it appears to be an outdated model that isn't undergoing the latest certifications and lacks other features (like ECC p384)
- nickik 10y agoI was really disappointed when Yubikey 4 came out but did not have NFC. I really want to have a RSA 4096/ECC p384 smartcard with NFC and I really wanted to be able to do U2F over NFC. I have some hope that a product like that is coming, I just don't know when.
- tokenizerrr 10y agoMy bad. There was at least another one that did NFC, but it must be a discontinued model and removed from the page since I last looked at it.
- chaz6 10y agoAn alternative to this is http://www.fidesmo.com/ http://www.fidesmo.com/ - are there any others?