3 ms·

Yeah, recently demo'ed Modlishka to my org, really scary stuff... Re U2F keys: I think I would prefer a security model where I provision a U2F key based on som

Yeah, recently demo'ed Modlishka to my org, really scary stuff... Re U2F keys: I think I would prefer a security model where I provision a U2F key based on some master secret stored in a "secure" but accessible way, i.e paper. Then I could create a new key with the same secret when I loose or break the first one. Having two U2F fobs seems almost like having two different locks on all your doors, setup so that only one is needed to open the door.

mrb 7y ago
It's possible to do what you describe with existing open-source/open-hardware U2F security keys, as they let you define the master secret from which the per-site private elliptic keys are generated. I haven't personally tried it, though. But for security you should still have at least two U2F security keys using different master secrets (if you lose one security key, you can deactivate it without deactivating the other).