2 ms·
The threat model is that people can't ssh to your machine in order to elevate their access (e.g. corporate VPN), because they can't physically touch the key. Ex
by yoz-y 5y ago
The threat model is that people can't ssh to your machine in order to elevate their access (e.g. corporate VPN), because they can't physically touch the key. Example: whatever happened when major Twitter accounts were compromised.
- karmakaze 5y agoYes, but how is that different than if the software integrated with the sensor built into the hardware, like when 1Password uses the laptop's fingerprint reader?
- yoz-y 5y agoThere are some technicalities (I'm not sure what they are, but some orgs may want to have some boxes ticked for corporate approval of a tool). Then there is the fact that you can actually use the key in multiple machines, even those that don't have biometrics (e.g. desktops) Personal use case: I have my 1password account locked with a YubiKey, which means that if somebody would steal my credentials they can't get in without one of my devices. However, I still can technically use it from a browser on a friend's computer if I really needed to.