3 ms·

What do actual card-form-factor “smartcards” get me over using the CCID interface on the Yubikey?

• xaduha 8y ago
  Not much as far as SSH is concerned, but you can buy many smart cards and just use one cardreader. For personal use it's more convenient to use Yubikey as a commercial proprietary solution.
  • akerl_ 8y ago
    I guess it depends. If I’ve got a fleet of users with commodity laptops, and I want them to do CCID auth, I could buy them each a card reader and a card, or I could buy them each a yubikey and use their USB port. Things are different if this is the DoD or somewhere that’s already got card readers as a core component, but if this is the DoD, I’m already winning because I get to use their PKI/cards and don’t have to build my own PKI :D
    • floatboth 8y ago
      Proper ThinkPads (e.g. A285, X390, A485, T490) come with a card reader option for regular consumers