4 ms·

> Buy a device, register it, install the app, What u2f app is this referring to? I've never needed anything more than chrome to use u2f on windows or ubuntu. A

by sigmar 6y ago

> Buy a device, register it, install the app, What u2f app is this referring to? I've never needed anything more than chrome to use u2f on windows or ubuntu. Also seems weird to complain about setting up an app, when a few sentences before that they recommend installing a password manager...

edent 6y ago
YubiKey recommended that I install Yubi Auth https://play.google.com/store/apps/details?id=com.yubico.yubioath https://play.google.com/store/apps/details?id=com.yubico.yub... and YubiClip https://play.google.com/store/apps/details?id=com.yubico.yubiclip https://play.google.com/store/apps/details?id=com.yubico.yub... Should I not have?
- Ottolay 6y ago
  For U2F specifically you don't need apps except support in the browser. The apps you listed are used for other types of functionality provided by the yubikey, like OTP and TOTP.
- tytso 6y ago
  If you had used one of the $10 USD Webauthn (aka U2F) tokens, it wouldn't have asked you to install any applications. The "problem" is the expensive Yubikeys that you were whining about has lots of extra functionality that has nothing to do with U2F, and that's what the extra applications are all about. I happen to use a Yubikey because I want that extra functionality, including using it to secure the keys I use for ssh and for digitally signing git tags so I can securely push git pull requests. But that's because I'm a developer, and it's why I'm happy to purchase multiple Yubikeys (one for my desktop, one for laptop, backups including one that is on a keychain, etc.) Perhaps you were reading web sites that was giving advice for developers as opposed to for consumers?
  - wyager 6y ago
    OpenSSH >= 8.something natively supports U2F. No need for extra functionality.
    - tialaramex 6y ago
      However, to use native FIDO the SSH server must accept it (GitHub does not for example) Whereas if you have RSA keys on the "full fat" Yubikey, they can be used regardless.

by sigmar 6y ago

edent 6y ago

YubiKey recommended that I install Yubi Auth https://play.google.com/store/apps/details?id=com.yubico.yubioath https://play.google.com/store/apps/details?id=com.yubico.yub... and YubiClip https://play.google.com/store/apps/details?id=com.yubico.yubiclip https://play.google.com/store/apps/details?id=com.yubico.yub... Should I not have?

Ottolay 6y ago
For U2F specifically you don't need apps except support in the browser. The apps you listed are used for other types of functionality provided by the yubikey, like OTP and TOTP.
tytso 6y ago
If you had used one of the $10 USD Webauthn (aka U2F) tokens, it wouldn't have asked you to install any applications. The "problem" is the expensive Yubikeys that you were whining about has lots of extra functionality that has nothing to do with U2F, and that's what the extra applications are all about. I happen to use a Yubikey because I want that extra functionality, including using it to secure the keys I use for ssh and for digitally signing git tags so I can securely push git pull requests. But that's because I'm a developer, and it's why I'm happy to purchase multiple Yubikeys (one for my desktop, one for laptop, backups including one that is on a keychain, etc.) Perhaps you were reading web sites that was giving advice for developers as opposed to for consumers?
- wyager 6y ago
  OpenSSH >= 8.something natively supports U2F. No need for extra functionality.
  - tialaramex 6y ago
    However, to use native FIDO the SSH server must accept it (GitHub does not for example) Whereas if you have RSA keys on the "full fat" Yubikey, they can be used regardless.