3 ms·
What's stopping you from linking more than just one physical FIDO-enabled device to a particular site/service? Most MFA implementations I've seen already allow
by BHSPitMonkey 6y ago
What's stopping you from linking more than just one physical FIDO-enabled device to a particular site/service? Most MFA implementations I've seen already allow this, and it seems especially important if you want to minimize the pain of losing/damaging that one sacred card.
- dzhiurgis 6y agoI don't carry any keys so those massive dongles would be pain. Plus must is not ALL which breaks everything.
- warkdarrior 6y agoMobile phones can be FIDO enabled. (see https://developers.google.com/identity/fido/android/native-apps https://developers.google.com/identity/fido/android/native-a... )
- sneak 6y agoAWS, for example, only permits one MFA device per IAM user account. I have four computers and four tokens. :/