3 ms·
> "let us login everywhere with a certificate that we'll be able to securely store on a HSM and easily revoke and update if necessary" Would U2F be a part of t
by tonyztan 8y ago
> "let us login everywhere with a certificate that we'll be able to securely store on a HSM and easily revoke and update if necessary"
Would U2F be a part of the answer here? It is by far the most user-friendly implementation I've seen, and it's already supported as a 2FA token on many sites.
- StavrosK 8y agoYes, it would very likely completely prevent the attack. So would TOTP, though. In this day and age, if you don't enable 2FA on all sites that support it, you're just irresponsible (especially if you're in a position as interesting as Gentoo maintainer).