5 ms·
You can verify whether you received a genuine key at: https://www.yubico.com/genuine/ https://www.yubico.com/genuine/
by jolan 7y ago
You can verify whether you received a genuine key at:
https://www.yubico.com/genuine/ https://www.yubico.com/genuine/
- willismichael 7y agoUnless some entity can man-in-the-middle attack your attempt at verifying it.
- OrgNet 7y agohttps is not safe against the government....
- OrgNet 7y ago... because they can force CAs to give them the keys to decrypt all traffic.
- NobodyNada 7y agoThat's not true, since CAs don't have "the keys to decrypt all traffic." They have the ability to sign website operators' public keys, but they do not have access to the website operators' private keys. Of course, the CA could also issue a fake certificate with attacker-controlled keys, but if they tried to do so, they would get caught by Certificate Transparency.