4 ms·

I've avoided getting a Yubikey because there's not an easy way to use it on my iPhone, sticking with TOTP. But that's a bit of an edge case. (iPhones lack NFC c

I've avoided getting a Yubikey because there's not an easy way to use it on my iPhone, sticking with TOTP. But that's a bit of an edge case. (iPhones lack NFC chips)

ak217 8y ago
I agree it's annoying. They're working on it, but they should have really enabled it sooner. There's no technical reason, iPhone has the necessary NFC hardware. https://www.wired.com/story/yubikey-lightning-ios-authentication-passwords/ https://www.wired.com/story/yubikey-lightning-ios-authentica...
- dontbenebby 8y ago
  Interesting link, thanks! For the time being, passphrases + TOTP 2F are sufficient, but I will look forward to being able to use a security key instead.
  - ak217 8y ago
    U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading.
    - dontbenebby 8y ago
      >U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading. Yes, IIRC it's impossible (or nearly so) to phish U2F.
- velosol 8y ago
  Their main page for mobile heavily implies they are already there with iPhone/NFC. https://www.yubico.com/products/yubikey-for-mobile/ https://www.yubico.com/products/yubikey-for-mobile/
  - ak217 8y ago
    Actually, you're right - that capability has apparently been available since last year: https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-mobile-sdk-for-ios-and-lastpass-support/ https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-.... The link I cited is for lightning-connected Yubikey hardware, which is supposed to come out this year.
dboreham 8y ago
fwiw, in case readers are curious, the NFC Yubikeys work fine on popular NFC-capable Android devices such as my GNote9.
Rafert 8y ago
Feitian makes devices with Bluetooth support: https://www.ftsafe.com/Products/FIDO/Multi https://www.ftsafe.com/Products/FIDO/Multi

I've avoided getting a Yubikey because there's not an easy way to use it on my iPhone, sticking with TOTP. But that's a bit of an edge case. (iPhones lack NFC chips)

ak217 8y ago

I agree it's annoying. They're working on it, but they should have really enabled it sooner. There's no technical reason, iPhone has the necessary NFC hardware. https://www.wired.com/story/yubikey-lightning-ios-authentication-passwords/ https://www.wired.com/story/yubikey-lightning-ios-authentica...

dontbenebby 8y ago
Interesting link, thanks! For the time being, passphrases + TOTP 2F are sufficient, but I will look forward to being able to use a security key instead.
- ak217 8y ago
  U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading.
  - dontbenebby 8y ago
    >U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading. Yes, IIRC it's impossible (or nearly so) to phish U2F.
velosol 8y ago
Their main page for mobile heavily implies they are already there with iPhone/NFC. https://www.yubico.com/products/yubikey-for-mobile/ https://www.yubico.com/products/yubikey-for-mobile/
- ak217 8y ago
  Actually, you're right - that capability has apparently been available since last year: https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-mobile-sdk-for-ios-and-lastpass-support/ https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-.... The link I cited is for lightning-connected Yubikey hardware, which is supposed to come out this year.

dboreham 8y ago

fwiw, in case readers are curious, the NFC Yubikeys work fine on popular NFC-capable Android devices such as my GNote9.

Rafert 8y ago

Feitian makes devices with Bluetooth support: https://www.ftsafe.com/Products/FIDO/Multi https://www.ftsafe.com/Products/FIDO/Multi