3 ms·
It's a while since I was looking into how they work and my memory is a bit foggy, is there no way to configure them in such a way that they could work for your
by corin_ 15y ago
It's a while since I was looking into how they work and my memory is a bit foggy, is there no way to configure them in such a way that they could work for your services and for my own, but without using the official central server?
For example, I use it for SSH authentication, if I had a server with you it would be nice if I didn't need one key to access the control system, and a different one for SSH.
- mattbee 15y agoThe security of Yubikeys (and RSA tokens, and most other two-factor authentication devices) rely on a shared secret between the authentication server and the devices themselves. If you wanted to authenticate your own VMs with your V-Key, we'd need to either share the programming secret with our customers, or provide an authentication service that we pre-configure the VMs to back onto. The former would compromise the security of the keys. The latter is a possibility, but not a high-priority one at the moment :) The keys do have a second authentication slot into which you can program your own fixed password, or another two-factor secret from which you can do your own auth on your own server (to use the second configuration you hold the button for about 4-5 seconds so it's not as convenient).
- corin_ 15y agoPerhaps you might some day be able to put your configuration in the second slot? (Again I'd assume, not exactly a priority.) Since I'd expect to be logging into my own stuff (e.g. servers) far more often than the control panel for those servers. Anyway, looks great overall, will certainly be trying it out as soon as I can, see if a switch from Linode is required :)