3 ms·
How does Yubikey prevent against SSL spoofing?
by sebazzz 7y ago
How does Yubikey prevent against SSL spoofing?
- wcip 7y agoWhat do you mean by SSL spoofing? Someone getting a public CA validated cert for a domain they do not own? I'd consider that a game over level threat myself, I can't imagine much of anything protecting against that completely. Certificate pinning can help mitigate the threat though.
- Spooky23 7y agoTotally different threat. The lock on your car door won’t stop a tow truck.
- graton 7y agoSomewhat related. U2F, which Yubikey supports does help prevent against DNS spoofing. A DNS name which looks very similar but is not the true DNS name of the site you want to connect to. Something that a human might not notice or get confused by will be stopped by U2F.