3 ms·
What I did not like about the process in Poland was that the key generation was done using a computer that wasn't mine. How do I know if the key was really gene
by jwr 8y ago
What I did not like about the process in Poland was that the key generation was done using a computer that wasn't mine. How do I know if the key was really generated on the card, rather than on the PC (and then a copy uploaded to the card)?
I have to trust the companies that provide the issuing services, which I do not like.
- Boulth 8y agoI don't know about your particular device but Yubikeys have remote attestation feature so that you (or anyone else) can validate that a given key was generated on the card, not imported (assuming you trust Yubico). This works only in PIV applet. Source: https://developers.yubico.com/yubico-piv-tool/Attestation.html https://developers.yubico.com/yubico-piv-tool/Attestation.ht...