> Since nobody can get at the ssh key thats in the Yubikey, a short pin will be fine - at least that's what the system promises. Short pin is fine because afte

> Since nobody can get at the ssh key thats in the Yubikey, a short pin will be fine - at least that's what the system promises. Short pin is fine because after 3 tries the token is locked. On the other hand there are no limits with software keys.