3 ms·
Is this post missing the point, or am I? I thought that the point of requiring attestation is to prove that someone actually did go out and buy a legitimate Yub
by StavrosK 5y ago
Is this post missing the point, or am I? I thought that the point of requiring attestation is to prove that someone actually did go out and buy a legitimate Yubikey (or whatnot) and ban that key if they're spamming.
With those two considerations, this actually seems like a really good idea to me.
- stickfigure 5y agoIt doesn't appear to identify any specific key, just that the user has a yubikey. You could only ban a whole key manufacturer (or key batch, however large that is).