5 ms·
Yeah. It is mostly about integrating and standards. Private keys in the secure enclave already does everything Yubikey does. All phones already have it. The OSe
by snarf21 6y ago
Yeah. It is mostly about integrating and standards. Private keys in the secure enclave already does everything Yubikey does. All phones already have it. The OSes just need to support FIDO and then we don't need passwords anymore (assuming a passcode lock on device). Essentially everyone would have 3FA (something you know, something you have and something you are)
- BlackFly 6y agoSecure enclaves as a second factor break the assumptions of 2FA threat models. If I compromise a single factor (your device) then I can gain both your password and your second factor. The best second factors are separate devices with their own screens that indicate what you are authenticating to/for before you provide your authentication. Of course, nothing ever stops a user from deputizing malware.
- snarf21 6y agoI guess I'm not seeing the difference between the secure enclave in a phone and the secure chip in a Yubikey in regards to threat models.