3 ms·

I wonder if nobody did ssh+nfc keys yet. At least I could trust it.

• Ekaros 5y ago
  SSH+NFC sound like horrible protocol choice for such token. Not that I would be against option to periodically rekey the whole system. Generate new pair of private keys and have the car and key swap them with my approval.
  • thriftwy 5y ago
    You don't need to ever rekey an SSH private-public key pair. Still, a single hands-free token can be taken by force or stolen.
    • Ekaros 5y ago
      So can car key... I don't really have a car and probably never will were I truly worried that it was essentially single factor authentication.
      • thriftwy 5y ago
        But the car key + separate wireless immobilizer token is 2FA and it makes me somewhat confident. WRT keyless entry, I actually have figured it out. Central wireless lock is cool. It's keyless start that I'm opposed to.
        • Ekaros 5y ago
          And how often you keep those separate and operate the car? Can you even safely store one in safe place and still use the car? Or is there more factors. Which then increases the potential failure cases. And I prefer really not to involve anything like pin codes, fingerprints, facial recognition needed for me to drive my own car.
          • thriftwy 5y ago
            Fingerprints and facial recognition is circus, but physical token is a real thing, and I do keep it separate from my car keys
• SilverRed 5y ago
  The security of key fobs is not a great concern when the windows can still be smashed.
  • vdfs 5y ago
    Key fob allow you to start the car engine, it should be a concern