5 ms·
U2F would be amazing. I hacked around with adding second factors to openssh and its possible but not great. There was even a hack to do it with U2F. But to hav
by nickik 8y ago
U2F would be amazing. I hacked around with adding second factors to openssh and its possible but not great. There was even a hack to do it with U2F.
But to have a ssh like thing that supports U2F out of box would be amazing.
- rkeene2 8y agoOpenSSH supports, at the very least, PKCS#11 modules out of the box these days, which can be used with hardware security modules.
- floatboth 8y agoFor a Yubikey, you don't even have to dick around with the PKCS11 mess. Just use gpg-agent, it will use the GPG key on your Yubikey as an SSH key.
- nickik 8y agoI have a Yubikey to but I never really liked that setup. I would much prefer to have my private keys on my computer and have U2F.
- kevin_nisbet 8y agoTeleport SSH Server supports U2F. https://github.com/gravitational/teleport https://github.com/gravitational/teleport https://gravitational.com/teleport/docs/admin-guide/#fido-u2f https://gravitational.com/teleport/docs/admin-guide/#fido-u2... Disclaimer: I work for gravitational, but not on teleport.