3 ms·
You are very mistaken; mt. gox does not have access to your shared secret and simply uses the yubico authentication servers to verify that the OTP is correct. P
by marcusw 15y ago
You are very mistaken; mt. gox does not have access to your shared secret and simply uses the yubico authentication servers to verify that the OTP is correct. Please go spread your lies elsewhere before you are charged with defamation.
- mattfawcett 15y agoIt looks like Mt.Gox are running their own authentication server. Their website states "Please note that our Yubikey can only be used with Mt.Gox" and I can't see anywhere that I can add the Yubikey that I already own. I'm not sure why anyone would want to buy a Yubikey from Mt.Gox if it can only be used on their site.
- rlpb 15y agoFair enough if they're doing that. My point isn't so much about who is storing the shared secret, but that someone else must be storing the shared secret. This is a fundamental issue with any shared secret -based cryptosystem.