4 ms·
MFA means all employees are now issued a yubikey to login?
by abledon 7y ago
MFA means all employees are now issued a yubikey to login?
- tptacek 7y agoUnlikely. TOTP, Duo Push, and SMS are all more popular that U2F/WebAuthn.
- eranation 7y agoYep. Those are still prone to phishing for a clever attacker and sleepy employee. For most users - that should be fine, but for the ones with the admin access to the nuclear reactor, U2F/FIDO2/WebAuthn probably worth the extra effort.