4 ms·
The security of Yubikeys (and RSA tokens, and most other two-factor authentication devices) rely on a shared secret between the authentication server and the de
by mattbee 15y ago
The security of Yubikeys (and RSA tokens, and most other two-factor authentication devices) rely on a shared secret between the authentication server and the devices themselves.
If you wanted to authenticate your own VMs with your V-Key, we'd need to either share the programming secret with our customers, or provide an authentication service that we pre-configure the VMs to back onto. The former would compromise the security of the keys. The latter is a possibility, but not a high-priority one at the moment :)
The keys do have a second authentication slot into which you can program your own fixed password, or another two-factor secret from which you can do your own auth on your own server (to use the second configuration you hold the button for about 4-5 seconds so it's not as convenient).
- corin_ 15y agoPerhaps you might some day be able to put your configuration in the second slot? (Again I'd assume, not exactly a priority.) Since I'd expect to be logging into my own stuff (e.g. servers) far more often than the control panel for those servers. Anyway, looks great overall, will certainly be trying it out as soon as I can, see if a switch from Linode is required :)